last executing test programs:

1m11.349878732s ago: executing program 2 (id=411):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r1 = fanotify_init(0xf00, 0x1000)
fanotify_mark(r1, 0x105, 0x10000839, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
readv(r1, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
read$FUSE(r2, &(0x7f0000000440)={0x2020}, 0x2020)
syz_io_uring_setup(0x4ec5, &(0x7f0000000140)={0x0, 0xd210, 0x2, 0x3, 0x224}, &(0x7f0000000080), 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000f9, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @vbi={0x3c0, 0x26, 0x2, 0x42303159, [0x680, 0xe4], [0x7ff, 0xfeedcafe], 0x13a}})
syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0)

1m11.220587693s ago: executing program 2 (id=412):
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getpeername$inet(r0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0x800, 0x1)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r2, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0)
r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x718bb647156ec3b7)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@o_path={&(0x7f00000001c0)='./file0\x00', r1, 0x4000, r2}, 0x18)
chdir(&(0x7f0000000000)='./bus\x00')
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r1)
sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r4, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040009}, 0x4)
linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000180)='./file0\x00', 0x1000)
unlink(&(0x7f00000004c0)='./file1\x00')
rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00')
mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
getpeername$inet(r0, 0x0, 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async)
open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) (async)
mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) (async)
socket$inet6_icmp(0xa, 0x2, 0x3a) (async)
bind$inet6(r2, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) (async)
open(&(0x7f0000000140)='./file0\x00', 0x0, 0x718bb647156ec3b7) (async)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@o_path={&(0x7f00000001c0)='./file0\x00', r1, 0x4000, r2}, 0x18) (async)
chdir(&(0x7f0000000000)='./bus\x00') (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r1) (async)
sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r4, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040009}, 0x4) (async)
linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000180)='./file0\x00', 0x1000) (async)
unlink(&(0x7f00000004c0)='./file1\x00') (async)
rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') (async)

1m11.170514634s ago: executing program 2 (id=413):
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000300)={0x134, 0x0, 0x104, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xeb}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x2, @private1, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd537}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1ff}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000f}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x20004094}, 0x4000000)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4000004)
sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0x9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8010)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44094}, 0x20000000)
socket$inet6(0xa, 0x80002, 0x0)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001e9ffff1b000180060001000200000008000300640101010800060006000000"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r7, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8)

1m11.100277313s ago: executing program 2 (id=414):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"])
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
ftruncate(r0, 0x4a8e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
r1 = open(&(0x7f0000000040)='./file0\x00', 0x10507e, 0xa6)
io_setup(0x7d, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0xfffffffffffffdef, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r1}])
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000900)="9bae17bf", 0x4}], 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020000003000048018000180080001006f7366504c6595000551b6000c0002800800014000000004140001800a0001007265646972000000040002800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000100000a"], 0x84}}, 0x0)

1m10.949560522s ago: executing program 2 (id=416):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, 0x0, 0x0)
write(r0, &(0x7f0000000340)="07000000010001", 0x7)

1m10.948921755s ago: executing program 2 (id=417):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002000000405a0609000001000000010902190001010080320904000001ff0000000705810240"], 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4)
sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x81101000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x79}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x2000c050}, 0x4000010)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x27}, {0x0, 0x0, 0x0, 0x6, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x70bd25, 0x4000000, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x6}}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x2b, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002000000405a0609000001000000010902190001010080320904000001ff0000000705810240"], 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) (async)
sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x81101000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x79}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x2000c050}, 0x4000010) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x27}, {0x0, 0x0, 0x0, 0x6, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x70bd25, 0x4000000, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x6}}, 0x20) (async)

55.893831602s ago: executing program 32 (id=417):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002000000405a0609000001000000010902190001010080320904000001ff0000000705810240"], 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4)
sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x81101000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x79}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x2000c050}, 0x4000010)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x27}, {0x0, 0x0, 0x0, 0x6, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x70bd25, 0x4000000, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x6}}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x2b, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002000000405a0609000001000000010902190001010080320904000001ff0000000705810240"], 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) (async)
sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x81101000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x79}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x2000c050}, 0x4000010) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x27}, {0x0, 0x0, 0x0, 0x6, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x70bd25, 0x4000000, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x6}}, 0x20) (async)

19.853438823s ago: executing program 1 (id=1165):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x480, 0x0)
r1 = open(&(0x7f00000002c0)='./file0\x00', 0x2a5c0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
r2 = open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x1)
r3 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x1)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x40045730, &(0x7f0000002780))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000040), &(0x7f0000000100)=r1}, 0x20)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x480, 0x0) (async)
open(&(0x7f00000002c0)='./file0\x00', 0x2a5c0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async)
open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x1) (async)
syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x1) (async)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x40045730, &(0x7f0000002780)) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000040), &(0x7f0000000100)=r1}, 0x20) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) (async)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)

19.464126506s ago: executing program 1 (id=1174):
syz_emit_ethernet(0x86, &(0x7f0000002340)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0xb, 0x78, 0x66, 0x0, 0x5, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x9, 0x0, {0x17, 0x4, 0x0, 0x17, 0x3b, 0x65, 0x7b98, 0x40, 0x2f, 0x4, @multicast1, @loopback, {[@timestamp_prespec={0x44, 0x14, 0x95, 0x3, 0x2, [{@empty, 0x6558}, {@rand_addr=0x64010101, 0x9}]}, @rr={0x7, 0x13, 0x54, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @loopback]}, @rr={0x7, 0xb, 0x9f, [@rand_addr=0x64010100, @rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0x48, 0x0, 0x8, [0x0, 0x338c, 0x1]}]}}}}}}}, 0x0)
mq_open(&(0x7f0000000a80)='\'\xf5@$*\x00', 0x40, 0xb, &(0x7f0000000ac0)={0x4, 0xffff, 0x1, 0x6})
mremap(&(0x7f0000ff5000/0x4000)=nil, 0x7fffdf008002, 0x7fffdf008000, 0x0, &(0x7f0000ffc000/0x2000)=nil)

19.404275423s ago: executing program 1 (id=1175):
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff0007058102000200070502020002000705830340"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000840}, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2680, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = eventfd(0x1)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0)
ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x4, r7, 0xb})
r8 = dup(r6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000000)='./config\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
connect$can_bcm(r3, &(0x7f0000001ff0)={0x1d, r4}, 0x10)
sendmsg$can_raw(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000140)=@canfd={{0x1}, 0xf8, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x44041}, 0x84841)
write$char_usb(r2, 0x0, 0x0)

16.244343993s ago: executing program 1 (id=1211):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "c701"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000017c00000000000000004500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x20004004}, 0x40) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000017c00000000000000004500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x20004004}, 0x40)

16.242501539s ago: executing program 1 (id=1212):
mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0)
mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x1, 0x30, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@cipso={0x86, 0x8, 0x2, [{0x1, 0x2}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xfffe}}}}}}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

16.124312793s ago: executing program 1 (id=1214):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r5=>0x0}) (async)
syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x86e1, 0x40, 0x8, 0x3d6}, 0x0, 0x0, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'geneve0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r7, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a80140007"], 0x58}, 0x1, 0x2}, 0x80)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x8, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x4, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x200007, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x466, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0x6, 0xa7, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0)

1.37434142s ago: executing program 0 (id=1371):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x68a41, 0x3)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x6, 0x6, 0xc, "faf98357e5128bbad0099cebdc25f5abb534464c516bdd8a0f350000000000000000000000000000000000000100", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b41000000050000000000001000", [0x6, 0x12000000000003]}})
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880), 0x0, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e02801", 0x4d}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d", 0x69}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x57, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

1.164215805s ago: executing program 0 (id=1375):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) (async)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5})
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
read$FUSE(r1, &(0x7f00000041c0)={0x2020}, 0x2020) (async)
read$FUSE(r1, &(0x7f00000041c0)={0x2020}, 0x2020)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
write(r0, &(0x7f0000000240)="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", 0x1000)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100000000a6982583000000000000850000009e0000009500000000002313fb590000b744ef657b016ed1fc840678459b8a9051a1914437168ccd35971a39cbdb6e79685d22611d43c911ad8b42e57de274915ca09612d66f6fd4611a3d000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100000000a6982583000000000000850000009e0000009500000000002313fb590000b744ef657b016ed1fc840678459b8a9051a1914437168ccd35971a39cbdb6e79685d22611d43c911ad8b42e57de274915ca09612d66f6fd4611a3d000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.163979292s ago: executing program 0 (id=1376):
r0 = userfaultfd(0x1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r2, 0x6a9354ab0d020bb7, 0x0, 0xffffffff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r3, &(0x7f00000001c0)="632fa9049defa694a29de073075bc66991c2f5753ba19cb761b90d37e3eb590623be96e65485f6310bd86c6c2bcedcb81a7c9e2ed0214108581301463017f4bff40a880a9d282d5834d35888fed6a351db2e2f8f7d2d43a28f98f4e3c7bae4437c33ea29d58e8659b9b1a8074d33d20fb55da0cbefcfe9866c35128a61b26539c35fee1020a6e84d62a8d1077ec78e18da45183bff3a336f4e8f2dee0416b5d32769b9ee6766c364481e18dd9f96", 0xae, 0x40000002, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

1.135908371s ago: executing program 33 (id=1214):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r5=>0x0}) (async)
syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x86e1, 0x40, 0x8, 0x3d6}, 0x0, 0x0, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'geneve0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r7, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a80140007"], 0x58}, 0x1, 0x2}, 0x80)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x8, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x4, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x200007, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x466, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0x6, 0xa7, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0)

804.339919ms ago: executing program 3 (id=1380):
r0 = socket(0x10, 0x3, 0x0)
setuid(0xee01)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301002, 0x0)
close(r1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
r3 = socket$rxrpc(0x21, 0x2, 0x2)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24)
listen(r3, 0xa)
connect$rxrpc(r4, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24)
sendmsg(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "01"}, {0x10, 0x110, 0xe}], 0x28}, 0x0)
sendmsg(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x18, 0x110, 0x1, "02"}], 0x18}, 0x0)
pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x1, 0x1, 0x0, 0x0}, 0x14)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

803.987604ms ago: executing program 3 (id=1381):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, 0x0)
chdir(0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
r1 = open(&(0x7f0000000040)='./file0\x00', 0x10507e, 0xa6)
io_setup(0x7d, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0xfffffffffffffdef, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r1}])
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000900)="9bae17bf", 0x4}], 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020000003000048018000180080001006f7366504c6595000551b6000c0002800800014000000004140001800a0001007265646972000000040002800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000100000a"], 0x84}}, 0x0)

684.196752ms ago: executing program 4 (id=1383):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x68a41, 0x3)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x6, 0x6, 0xc, "faf98357e5128bbad0099cebdc25f5abb534464c516bdd8a0f350000000000000000000000000000000000000100", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b41000000050000000000001000", [0x6, 0x12000000000003]}})
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880), 0x0, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e02801", 0x4d}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d", 0x69}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x57, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

624.250677ms ago: executing program 3 (id=1384):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r1, 0x9c3fa077fa966179, 0x1f, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xfffffffe}, 0x4000054)

554.375787ms ago: executing program 4 (id=1385):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000001100000085000000a000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
listen(r0, 0x5)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xf2, 0x0, 0x7fff0000}]})
syz_open_dev$tty1(0xc, 0x4, 0x4)
setresgid(0x0, 0x0, 0xee00)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6)
close_range(r2, r3, 0x2)

493.493216ms ago: executing program 4 (id=1386):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x68a41, 0x3)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x6, 0x6, 0xc, "faf98357e5128bbad0099cebdc25f5abb534464c516bdd8a0f350000000000000000000000000000000000000100", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b41000000050000000000001000", [0x6, 0x12000000000003]}})
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r4, 0x0, 0x0, 0x48040)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x57, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

433.13369ms ago: executing program 3 (id=1387):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x68a41, 0x3)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x6, 0x6, 0xc, "faf98357e5128bbad0099cebdc25f5abb534464c516bdd8a0f350000000000000000000000000000000000000100", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b41000000050000000000001000", [0x6, 0x12000000000003]}})
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{0x0}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e02801", 0x4d}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a13024", 0xcf}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x57, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

330.607464ms ago: executing program 4 (id=1388):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
close(r1)
socket(0x10, 0x803, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = syz_open_pts(0xffffffffffffffff, 0xca02)
ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000000)={0xa, 0x4, 0xb})
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0xb}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4894}, 0x2)
r7 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff88", 0x14}], 0x1}, 0x4005)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
r8 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000, 0x5, 0x80000}})

264.009292ms ago: executing program 3 (id=1389):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x68a41, 0x3)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x6, 0x6, 0xc, "faf98357e5128bbad0099cebdc25f5abb534464c516bdd8a0f350000000000000000000000000000000000000100", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b41000000050000000000001000", [0x6, 0x12000000000003]}})
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e02801", 0x4d}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9", 0xe2}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x57, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

263.672806ms ago: executing program 0 (id=1390):
r0 = socket(0x10, 0x3, 0x0)
setuid(0xee01)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301002, 0x0)
close(r1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
r3 = socket$rxrpc(0x21, 0x2, 0x2)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24)
listen(r3, 0xa)
connect$rxrpc(r4, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24)
sendmsg(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "01"}, {0x10, 0x110, 0xe}], 0x28}, 0x0)
sendmsg(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x18, 0x110, 0x1, "02"}], 0x18}, 0x0)
pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x1, 0x1, 0x0, 0x0}, 0x14)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

214.027383ms ago: executing program 0 (id=1391):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
r1 = open(&(0x7f0000000040)='./file0\x00', 0x10507e, 0xa6)
io_setup(0x7d, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0xfffffffffffffdef, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r1}])
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000900)="9bae17bf", 0x4}], 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020000003000048018000180080001006f7366504c6595000551b6000c0002800800014000000004140001800a0001007265646972000000040002800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000100000a"], 0x84}}, 0x0)

212.507275ms ago: executing program 4 (id=1392):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x68a41, 0x3)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x6, 0x6, 0xc, "faf98357e5128bbad0099cebdc25f5abb534464c516bdd8a0f350000000000000000000000000000000000000100", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b41000000050000000000001000", [0x6, 0x12000000000003]}})
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{0x0}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e02801", 0x4d}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d", 0x69}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x57, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

84.393992ms ago: executing program 3 (id=1393):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
close(r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe81}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
write(0xffffffffffffffff, &(0x7f00000001c0)='bdc', 0x3)
close(0xffffffffffffffff)
write(0xffffffffffffffff, &(0x7f0000000240), 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/platform/devices/snd_aloop.0/driver/unbind\x00', 0x1, 0x0)
write(r2, &(0x7f00000002c0)='snd_aloop.0\x00', 0xc)
close(0xffffffffffffffff)
ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000100)={0xfec00000, 0x11c000})
write(0xffffffffffffffff, 0x0, 0x0)

1.538906ms ago: executing program 0 (id=1394):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r1, 0x9c3fa077fa966179, 0x1f, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xffffffff}, 0x4000054)

0s ago: executing program 4 (id=1395):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x68a41, 0x3)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x6, 0x6, 0xc, "faf98357e5128bbad0099cebdc25f5abb534464c516bdd8a0f350000000000000000000000000000000000000100", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b41000000050000000000001000", [0x6, 0x12000000000003]}})
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r4, 0x0, 0x0, 0x48040)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x57, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

ctl+0x10/0x10
[  114.054060][ T7729]  __x64_sys_ioctl+0x18e/0x210
[  114.054088][ T7729]  do_syscall_64+0x115/0x870
[  114.054121][ T7729]  ? clear_bhb_loop+0x40/0x90
[  114.054144][ T7729]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.054163][ T7729] RIP: 0033:0x7f479ef9e0d9
[  114.054179][ T7729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  114.054196][ T7729] RSP: 002b:00007f479feff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  114.054224][ T7729] RAX: ffffffffffffffda RBX: 00007f479f225fa0 RCX: 00007f479ef9e0d9
[  114.054236][ T7729] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  114.054246][ T7729] RBP: 00007f479feff090 R08: 0000000000000000 R09: 0000000000000000
[  114.054257][ T7729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  114.054268][ T7729] R13: 00007f479f226038 R14: 00007f479f225fa0 R15: 00007ffdc5527d48
[  114.054293][ T7729]  </TASK>
[  114.124039][ T7735] i2c i2c-0: delete_device: Extra parameters
[  114.418133][ T7749] dvmrp0: entered allmulticast mode
[  114.524586][ T7754] netlink: 'syz.3.591': attribute type 8 has an invalid length.
[  114.731887][   T56] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  114.893450][   T56] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  114.898162][   T56] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 8202, setting to 1024
[  114.915871][   T56] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  114.920348][   T56] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 8202, setting to 1024
[  114.928782][   T56] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  114.932608][   T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.935860][   T56] usb 6-1: Product: syz
[  114.937569][   T56] usb 6-1: Manufacturer: syz
[  114.939462][   T56] usb 6-1: SerialNumber: syz
[  114.948381][   T56] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected
[  114.954939][   T56] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  114.964418][   T56] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB2
[  115.115113][   T42] kauditd_printk_skb: 2 callbacks suppressed
[  115.115136][   T42] audit: type=1400 audit(1785936248.921:591): avc:  denied  { execute } for  pid=7755 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  115.131586][   T42] audit: type=1400 audit(1785936248.921:592): avc:  denied  { execute_no_trans } for  pid=7755 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  115.176463][   T42] audit: type=1400 audit(1785936248.981:593): avc:  denied  { write } for  pid=7756 comm="syz.0.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  115.249779][ T5749] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  115.257731][ T5749] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  115.266492][ T5749] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  115.269187][ T7762] e1000e 0000:00:02.0 eth1: removed PHC
[  115.271361][ T5749] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  115.275871][ T5749] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  115.340880][   T42] audit: type=1400 audit(1785936249.141:594): avc:  denied  { write } for  pid=7766 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  115.465534][ T7762] e1000e 0000:00:02.0 eth1: NIC Link is Down
[  115.473886][   T42] audit: type=1400 audit(1785936249.281:595): avc:  denied  { write } for  pid=7778 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  115.530179][ T7781] FAULT_INJECTION: forcing a failure.
[  115.530179][ T7781] name failslab, interval 1, probability 0, space 0, times 0
[  115.535705][ T7781] CPU: 0 UID: 0 PID: 7781 Comm: syz.3.595 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  115.535734][ T7781] Tainted: [L]=SOFTLOCKUP
[  115.535740][ T7781] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  115.535751][ T7781] Call Trace:
[  115.535758][ T7781]  <TASK>
[  115.535766][ T7781]  dump_stack_lvl+0x100/0x190
[  115.535800][ T7781]  should_fail_ex.cold+0x5/0xa
[  115.535826][ T7781]  should_failslab+0xc2/0x120
[  115.535854][ T7781]  __kvmalloc_node_noprof+0x116/0x970
[  115.535877][ T7781]  ? __lock_acquire+0x49f/0x1a40
[  115.535915][ T7781]  ? __kvm_mmu_topup_memory_cache+0x455/0x5f0
[  115.535946][ T7781]  __kvm_mmu_topup_memory_cache+0x455/0x5f0
[  115.535976][ T7781]  mmu_topup_memory_caches+0x25/0x170
[  115.536006][ T7781]  kvm_mmu_load+0xe2/0x2570
[  115.536032][ T7781]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[  115.536052][ T7781]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[  115.536075][ T7781]  ? __pfx_kvm_mmu_load+0x10/0x10
[  115.536099][ T7781]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[  115.536123][ T7781]  ? kvm_check_and_inject_events+0x873/0x12a0
[  115.536149][ T7781]  ? record_steal_time+0x3a0/0xbb0
[  115.536172][ T7781]  vcpu_run+0x3aaa/0x5de0
[  115.536204][ T7781]  ? __pfx_vcpu_run+0x10/0x10
[  115.536236][ T7781]  ? rcu_is_watching+0x12/0xc0
[  115.536273][ T7781]  ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  115.536297][ T7781]  kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  115.536330][ T7781]  kvm_vcpu_ioctl+0x730/0x1700
[  115.536353][ T7781]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  115.536373][ T7781]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  115.536398][ T7781]  ? do_vfs_ioctl+0x226/0x13e0
[  115.536427][ T7781]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  115.536452][ T7781]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  115.536490][ T7781]  ? __fget_files+0x215/0x3d0
[  115.536508][ T7781]  ? hook_file_ioctl_common+0x140/0x440
[  115.536538][ T7781]  ? selinux_file_ioctl+0x13b/0x290
[  115.536564][ T7781]  ? selinux_file_ioctl+0xb6/0x290
[  115.536593][ T7781]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  115.536615][ T7781]  __x64_sys_ioctl+0x18e/0x210
[  115.536644][ T7781]  do_syscall_64+0x115/0x870
[  115.536667][ T7781]  ? clear_bhb_loop+0x40/0x90
[  115.536689][ T7781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.536708][ T7781] RIP: 0033:0x7fbba739e0d9
[  115.536741][ T7781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  115.536759][ T7781] RSP: 002b:00007fbba8249028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  115.536778][ T7781] RAX: ffffffffffffffda RBX: 00007fbba7625fa0 RCX: 00007fbba739e0d9
[  115.536789][ T7781] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  115.536800][ T7781] RBP: 00007fbba8249090 R08: 0000000000000000 R09: 0000000000000000
[  115.536811][ T7781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  115.536822][ T7781] R13: 00007fbba7626038 R14: 00007fbba7625fa0 R15: 00007ffe63b3cab8
[  115.536845][ T7781]  </TASK>
[  115.752560][   T42] audit: type=1400 audit(1785936249.551:596): avc:  denied  { write } for  pid=7795 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  115.798823][   T42] audit: type=1400 audit(1785936249.601:597): avc:  denied  { write } for  pid=7801 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  115.887139][   T42] audit: type=1400 audit(1785936249.691:598): avc:  denied  { mmap_zero } for  pid=7808 comm="syz.3.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[  115.898111][   T42] audit: type=1400 audit(1785936249.701:599): avc:  denied  { write } for  pid=7805 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  115.961883][ T5746] Bluetooth: hci1: command 0x0c1a tx timeout
[  115.977425][   T42] audit: type=1400 audit(1785936249.781:600): avc:  denied  { write } for  pid=7819 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  116.366910][ T7761] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.369946][ T7761] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.373906][ T7761] bridge_slave_0: entered allmulticast mode
[  116.380138][ T7761] bridge_slave_0: entered promiscuous mode
[  116.385973][ T7761] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.388525][ T7761] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.390910][ T7761] bridge_slave_1: entered allmulticast mode
[  116.395920][ T7761] bridge_slave_1: entered promiscuous mode
[  116.457937][ T7761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  116.465681][ T7761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  116.475190][ T7874] FAULT_INJECTION: forcing a failure.
[  116.475190][ T7874] name failslab, interval 1, probability 0, space 0, times 0
[  116.480567][ T7874] CPU: 0 UID: 0 PID: 7874 Comm: syz.3.604 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  116.480595][ T7874] Tainted: [L]=SOFTLOCKUP
[  116.480602][ T7874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  116.480613][ T7874] Call Trace:
[  116.480631][ T7874]  <TASK>
[  116.480639][ T7874]  dump_stack_lvl+0x100/0x190
[  116.480668][ T7874]  should_fail_ex.cold+0x5/0xa
[  116.480695][ T7874]  should_failslab+0xc2/0x120
[  116.480720][ T7874]  kmem_cache_alloc_noprof+0x91/0x6a0
[  116.480744][ T7874]  ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  116.480772][ T7874]  __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  116.480801][ T7874]  mmu_topup_memory_caches+0x25/0x170
[  116.480831][ T7874]  kvm_mmu_load+0xe2/0x2570
[  116.480856][ T7874]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[  116.480875][ T7874]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[  116.480896][ T7874]  ? __pfx_kvm_mmu_load+0x10/0x10
[  116.480947][ T7874]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[  116.480969][ T7874]  ? kvm_check_and_inject_events+0x873/0x12a0
[  116.481021][ T7874]  ? record_steal_time+0x3a0/0xbb0
[  116.481043][ T7874]  vcpu_run+0x3aaa/0x5de0
[  116.481079][ T7874]  ? __pfx_vcpu_run+0x10/0x10
[  116.481113][ T7874]  ? rcu_is_watching+0x12/0xc0
[  116.481145][ T7874]  ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  116.481170][ T7874]  kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  116.481203][ T7874]  kvm_vcpu_ioctl+0x730/0x1700
[  116.481225][ T7874]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  116.481246][ T7874]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  116.481270][ T7874]  ? do_vfs_ioctl+0x226/0x13e0
[  116.481298][ T7874]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  116.481324][ T7874]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  116.481364][ T7874]  ? __fget_files+0x215/0x3d0
[  116.481382][ T7874]  ? hook_file_ioctl_common+0x140/0x440
[  116.481416][ T7874]  ? selinux_file_ioctl+0x13b/0x290
[  116.481443][ T7874]  ? selinux_file_ioctl+0xb6/0x290
[  116.481471][ T7874]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  116.481492][ T7874]  __x64_sys_ioctl+0x18e/0x210
[  116.481519][ T7874]  do_syscall_64+0x115/0x870
[  116.481542][ T7874]  ? clear_bhb_loop+0x40/0x90
[  116.481564][ T7874]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.481583][ T7874] RIP: 0033:0x7fbba739e0d9
[  116.481599][ T7874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  116.481616][ T7874] RSP: 002b:00007fbba8249028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  116.481643][ T7874] RAX: ffffffffffffffda RBX: 00007fbba7625fa0 RCX: 00007fbba739e0d9
[  116.481654][ T7874] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  116.481664][ T7874] RBP: 00007fbba8249090 R08: 0000000000000000 R09: 0000000000000000
[  116.481675][ T7874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  116.481685][ T7874] R13: 00007fbba7626038 R14: 00007fbba7625fa0 R15: 00007ffe63b3cab8
[  116.481724][ T7874]  </TASK>
[  116.494428][ T7761] team0: Port device team_slave_0 added
[  116.591018][ T7761] team0: Port device team_slave_1 added
[  116.604408][ T7761] batman_adv: batadv0: Adding interface: batadv_slave_0
[  116.606538][ T7761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  116.614035][ T7761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  116.618165][ T7761] batman_adv: batadv0: Adding interface: batadv_slave_1
[  116.620977][ T7761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  116.635152][ T7761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  116.673089][ T7761] hsr_slave_0: entered promiscuous mode
[  116.674121][ T7889] netlink: 100 bytes leftover after parsing attributes in process `syz.3.605'.
[  116.677720][ T7761] hsr_slave_1: entered promiscuous mode
[  116.678111][ T7761] debugfs: 'hsr0' already exists in 'hsr'
[  116.681172][ T7761] Cannot create hsr debugfs directory
[  116.695753][ T7889] Process accounting resumed
[  116.814928][ T7761] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  116.818994][ T7761] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  116.822737][ T7761] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  116.829742][ T7761] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  116.833252][ T7761] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  116.839442][ T7761] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  116.844152][ T7761] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  116.852291][ T7761] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  116.948874][ T7761] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.964210][ T7761] 8021q: adding VLAN 0 to HW filter on device team0
[  116.972170][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.974375][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.985705][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.987978][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.318008][ T7761] 8021q: adding VLAN 0 to HW filter on device batadv0
[  117.322009][ T5746] Bluetooth: hci4: command tx timeout
[  117.374745][ T5809] usb 6-1: USB disconnect, device number 14
[  117.416851][ T7939] FAULT_INJECTION: forcing a failure.
[  117.416851][ T7939] name failslab, interval 1, probability 0, space 0, times 0
[  117.423019][ T5809] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  117.427218][ T7939] CPU: 2 UID: 0 PID: 7939 Comm: syz.0.613 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  117.427237][ T7939] Tainted: [L]=SOFTLOCKUP
[  117.427241][ T7939] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  117.427248][ T7939] Call Trace:
[  117.427252][ T7939]  <TASK>
[  117.427257][ T7939]  dump_stack_lvl+0x100/0x190
[  117.427281][ T7939]  should_fail_ex.cold+0x5/0xa
[  117.427297][ T7939]  should_failslab+0xc2/0x120
[  117.427312][ T7939]  kmem_cache_alloc_noprof+0x91/0x6a0
[  117.427327][ T7939]  ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  117.427344][ T7939]  __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  117.427361][ T7939]  mmu_topup_memory_caches+0x25/0x170
[  117.427378][ T7939]  kvm_mmu_load+0xe2/0x2570
[  117.427392][ T7939]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[  117.427404][ T7939]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[  117.427417][ T7939]  ? __pfx_kvm_mmu_load+0x10/0x10
[  117.427430][ T7939]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[  117.427444][ T7939]  ? kvm_check_and_inject_events+0x873/0x12a0
[  117.427461][ T7939]  ? record_steal_time+0x3a0/0xbb0
[  117.427475][ T7939]  vcpu_run+0x3aaa/0x5de0
[  117.427489][ T7939]  ? mark_held_locks+0x40/0x70
[  117.427509][ T7939]  ? __pfx_vcpu_run+0x10/0x10
[  117.427546][ T7939]  ? rcu_is_watching+0x12/0xc0
[  117.427568][ T7939]  ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  117.427584][ T7939]  kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  117.427603][ T7939]  kvm_vcpu_ioctl+0x730/0x1700
[  117.427616][ T7939]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  117.427629][ T7939]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  117.427643][ T7939]  ? do_vfs_ioctl+0x226/0x13e0
[  117.427660][ T7939]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  117.427676][ T7939]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  117.427700][ T7939]  ? __fget_files+0x215/0x3d0
[  117.427711][ T7939]  ? hook_file_ioctl_common+0x140/0x440
[  117.427728][ T7939]  ? selinux_file_ioctl+0x13b/0x290
[  117.427744][ T7939]  ? selinux_file_ioctl+0xb6/0x290
[  117.427762][ T7939]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  117.427774][ T7939]  __x64_sys_ioctl+0x18e/0x210
[  117.427791][ T7939]  do_syscall_64+0x115/0x870
[  117.427805][ T7939]  ? clear_bhb_loop+0x40/0x90
[  117.427819][ T7939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.427830][ T7939] RIP: 0033:0x7f678f59e0d9
[  117.427840][ T7939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  117.427851][ T7939] RSP: 002b:00007f678d7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  117.427862][ T7939] RAX: ffffffffffffffda RBX: 00007f678f826090 RCX: 00007f678f59e0d9
[  117.427869][ T7939] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  117.427875][ T7939] RBP: 00007f678d7d5090 R08: 0000000000000000 R09: 0000000000000000
[  117.427881][ T7939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  117.427887][ T7939] R13: 00007f678f826128 R14: 00007f678f826090 R15: 00007ffde0ae0b28
[  117.427900][ T7939]  </TASK>
[  117.528046][ T7761] veth0_vlan: entered promiscuous mode
[  117.534751][ T5809] ti_usb_3410_5052_2 ttyUSB2: TI USB 5052 2 port adapter converter now disconnected from ttyUSB2
[  117.539606][ T5809] ti_usb_3410_5052 6-1:2.0: device disconnected
[  117.577802][ T7761] veth1_vlan: entered promiscuous mode
[  117.603976][ T7761] veth0_macvtap: entered promiscuous mode
[  117.613850][ T7761] veth1_macvtap: entered promiscuous mode
[  117.619982][ T7950] iommufd_mock iommufd_mock0: Adding to iommu group 1
[  117.625574][ T7761] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.635918][ T7761] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.711910][ T5817] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.725157][ T5817] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.787440][   T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.793011][   T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.828177][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.830865][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.841903][ T5825] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.852728][ T5825] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.921868][ T7969] 9pnet_virtio: no channels available for device syz
[  117.934899][ T7969] overlayfs: failed to resolve './cgroup': -2
[  117.941540][ T7974] iommufd_mock iommufd_mock0: Adding to iommu group 1
[  117.942554][ T7969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.593'.
[  117.957049][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.593'.
[  117.960655][ T7969] netlink: 24 bytes leftover after parsing attributes in process `syz.4.593'.
[  118.121532][ T7984] FAULT_INJECTION: forcing a failure.
[  118.121532][ T7984] name failslab, interval 1, probability 0, space 0, times 0
[  118.133359][ T7984] CPU: 0 UID: 0 PID: 7984 Comm: syz.1.628 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  118.133389][ T7984] Tainted: [L]=SOFTLOCKUP
[  118.133396][ T7984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  118.133406][ T7984] Call Trace:
[  118.133414][ T7984]  <TASK>
[  118.133422][ T7984]  dump_stack_lvl+0x100/0x190
[  118.133452][ T7984]  should_fail_ex.cold+0x5/0xa
[  118.133477][ T7984]  should_failslab+0xc2/0x120
[  118.133502][ T7984]  kmem_cache_alloc_noprof+0x91/0x6a0
[  118.133526][ T7984]  ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  118.133554][ T7984]  __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  118.133584][ T7984]  mmu_topup_memory_caches+0x25/0x170
[  118.133612][ T7984]  kvm_mmu_load+0xe2/0x2570
[  118.133637][ T7984]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[  118.133656][ T7984]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[  118.133679][ T7984]  ? __pfx_kvm_mmu_load+0x10/0x10
[  118.133701][ T7984]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[  118.133724][ T7984]  ? kvm_check_and_inject_events+0x873/0x12a0
[  118.133750][ T7984]  ? record_steal_time+0x3a0/0xbb0
[  118.133773][ T7984]  vcpu_run+0x3aaa/0x5de0
[  118.133823][ T7984]  ? __pfx_vcpu_run+0x10/0x10
[  118.133860][ T7984]  ? rcu_is_watching+0x12/0xc0
[  118.133891][ T7984]  ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  118.133917][ T7984]  kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  118.133950][ T7984]  kvm_vcpu_ioctl+0x730/0x1700
[  118.133973][ T7984]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  118.133994][ T7984]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  118.134019][ T7984]  ? do_vfs_ioctl+0x226/0x13e0
[  118.134046][ T7984]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  118.134072][ T7984]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  118.134113][ T7984]  ? __fget_files+0x215/0x3d0
[  118.134130][ T7984]  ? hook_file_ioctl_common+0x140/0x440
[  118.134159][ T7984]  ? selinux_file_ioctl+0x13b/0x290
[  118.134186][ T7984]  ? selinux_file_ioctl+0xb6/0x290
[  118.134214][ T7984]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  118.134241][ T7984]  __x64_sys_ioctl+0x18e/0x210
[  118.134269][ T7984]  do_syscall_64+0x115/0x870
[  118.134291][ T7984]  ? clear_bhb_loop+0x40/0x90
[  118.134314][ T7984]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.134332][ T7984] RIP: 0033:0x7f479ef9e0d9
[  118.134349][ T7984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  118.134366][ T7984] RSP: 002b:00007f479feff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  118.134385][ T7984] RAX: ffffffffffffffda RBX: 00007f479f225fa0 RCX: 00007f479ef9e0d9
[  118.134397][ T7984] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  118.134407][ T7984] RBP: 00007f479feff090 R08: 0000000000000000 R09: 0000000000000000
[  118.134418][ T7984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  118.134428][ T7984] R13: 00007f479f226038 R14: 00007f479f225fa0 R15: 00007ffdc5527d48
[  118.134451][ T7984]  </TASK>
[  118.231925][ T1497] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[  118.466086][ T1497] usb 8-1: unable to read config index 0 descriptor/start: -71
[  118.472757][ T1497] usb 8-1: can't read configurations, error -71
[  118.478536][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.634'.
[  118.535213][ T8005] netlink: 28 bytes leftover after parsing attributes in process `syz.4.634'.
[  118.596536][ T8005] nvme nvme0: rdma connection establishment failed (-104)
[  118.670911][ T8018] 9pnet_virtio: no channels available for device syz
[  118.677410][ T8018] overlayfs: failed to resolve './cgroup': -2
[  118.685113][ T8018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.639'.
[  118.689132][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.639'.
[  118.697886][ T8018] netlink: 24 bytes leftover after parsing attributes in process `syz.4.639'.
[  118.853671][   T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  118.965311][ T8027] FAULT_INJECTION: forcing a failure.
[  118.965311][ T8027] name failslab, interval 1, probability 0, space 0, times 0
[  118.970971][ T8027] CPU: 0 UID: 0 PID: 8027 Comm: syz.4.641 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  118.970999][ T8027] Tainted: [L]=SOFTLOCKUP
[  118.971005][ T8027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  118.971017][ T8027] Call Trace:
[  118.971025][ T8027]  <TASK>
[  118.971034][ T8027]  dump_stack_lvl+0x100/0x190
[  118.971066][ T8027]  should_fail_ex.cold+0x5/0xa
[  118.971092][ T8027]  should_failslab+0xc2/0x120
[  118.971119][ T8027]  kmem_cache_alloc_noprof+0x91/0x6a0
[  118.971145][ T8027]  ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  118.971175][ T8027]  __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  118.971205][ T8027]  mmu_topup_memory_caches+0x25/0x170
[  118.971234][ T8027]  kvm_mmu_load+0xe2/0x2570
[  118.971261][ T8027]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[  118.971282][ T8027]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[  118.971305][ T8027]  ? __pfx_kvm_mmu_load+0x10/0x10
[  118.971335][ T8027]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[  118.971359][ T8027]  ? kvm_check_and_inject_events+0x873/0x12a0
[  118.971386][ T8027]  ? record_steal_time+0x3a0/0xbb0
[  118.971409][ T8027]  vcpu_run+0x3aaa/0x5de0
[  118.971446][ T8027]  ? __pfx_vcpu_run+0x10/0x10
[  118.971481][ T8027]  ? rcu_is_watching+0x12/0xc0
[  118.971513][ T8027]  ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  118.971560][ T8027]  kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  118.971595][ T8027]  kvm_vcpu_ioctl+0x730/0x1700
[  118.971620][ T8027]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  118.971642][ T8027]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  118.971667][ T8027]  ? do_vfs_ioctl+0x226/0x13e0
[  118.971709][ T8027]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  118.971737][ T8027]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  118.971777][ T8027]  ? __fget_files+0x215/0x3d0
[  118.971796][ T8027]  ? hook_file_ioctl_common+0x140/0x440
[  118.971827][ T8027]  ? selinux_file_ioctl+0x13b/0x290
[  118.971854][ T8027]  ? selinux_file_ioctl+0xb6/0x290
[  118.971884][ T8027]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  118.971907][ T8027]  __x64_sys_ioctl+0x18e/0x210
[  118.971936][ T8027]  do_syscall_64+0x115/0x870
[  118.971960][ T8027]  ? clear_bhb_loop+0x40/0x90
[  118.971985][ T8027]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.972004][ T8027] RIP: 0033:0x7f5a5179e0d9
[  118.972021][ T8027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  118.972039][ T8027] RSP: 002b:00007f5a525f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  118.972059][ T8027] RAX: ffffffffffffffda RBX: 00007f5a51a25fa0 RCX: 00007f5a5179e0d9
[  118.972070][ T8027] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  118.972082][ T8027] RBP: 00007f5a525f3090 R08: 0000000000000000 R09: 0000000000000000
[  118.972093][ T8027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  118.972104][ T8027] R13: 00007f5a51a26038 R14: 00007f5a51a25fa0 R15: 00007ffeb92acb68
[  118.972128][ T8027]  </TASK>
[  119.002113][   T24] usb 6-1: Using ep0 maxpacket: 16
[  119.089217][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  119.094596][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  119.099035][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  119.102947][   T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  119.106349][   T24] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  119.108616][ T8040] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  119.111843][   T24] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  119.116477][   T24] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  119.118986][   T24] usb 6-1: Manufacturer: syz
[  119.124397][   T24] usb 6-1: config 0 descriptor??
[  119.244289][ T8051] 9pnet_virtio: no channels available for device syz
[  119.248918][ T8051] overlayfs: failed to resolve './cgroup': -2
[  119.249828][ T8052] mac80211_hwsim hwsim8 syzkaller1: entered promiscuous mode
[  119.255610][ T8052] mac80211_hwsim hwsim8 syzkaller1: entered allmulticast mode
[  119.260464][ T8051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.649'.
[  119.263533][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.649'.
[  119.266414][ T8051] netlink: 24 bytes leftover after parsing attributes in process `syz.4.649'.
[  119.371889][   T24] rc_core: IR keymap rc-hauppauge not found
[  119.374399][   T24] Registered IR keymap rc-empty
[  119.376868][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  119.394098][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  119.413376][ T5746] Bluetooth: hci4: command tx timeout
[  119.421274][   T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0
[  119.426587][   T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input10
[  119.436712][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  119.452505][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  119.471978][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  119.493962][ T8040] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  119.497873][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  119.522133][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  119.522960][ T5809] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  119.543181][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  119.562036][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  119.581885][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  119.601980][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  119.624254][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  119.645368][   T24] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  119.649466][   T24] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  119.660973][   T24] usb 6-1: USB disconnect, device number 15
[  119.675439][ T5809] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 108, changing to 10
[  119.680626][ T5809] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25610, setting to 1024
[  119.694723][ T5809] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 108, changing to 10
[  119.700794][ T5809] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25610, setting to 1024
[  119.712076][ T5809] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  119.716216][ T5809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.719614][ T5809] usb 5-1: Product: syz
[  119.721401][ T5809] usb 5-1: Manufacturer: syz
[  119.726998][ T5809] usb 5-1: SerialNumber: syz
[  119.737025][ T8052] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  119.748778][ T5809] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected
[  119.762360][ T5809] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  119.770376][ T5809] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB2
[  119.950643][ T8072] FAULT_INJECTION: forcing a failure.
[  119.950643][ T8072] name failslab, interval 1, probability 0, space 0, times 0
[  119.955475][ T8072] CPU: 0 UID: 0 PID: 8072 Comm: syz.3.656 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  119.955494][ T8072] Tainted: [L]=SOFTLOCKUP
[  119.955497][ T8072] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  119.955504][ T8072] Call Trace:
[  119.955509][ T8072]  <TASK>
[  119.955534][ T8072]  dump_stack_lvl+0x100/0x190
[  119.955554][ T8072]  should_fail_ex.cold+0x5/0xa
[  119.955570][ T8072]  should_failslab+0xc2/0x120
[  119.955585][ T8072]  kmem_cache_alloc_noprof+0x91/0x6a0
[  119.955599][ T8072]  ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  119.955616][ T8072]  __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  119.955632][ T8072]  mmu_topup_memory_caches+0x25/0x170
[  119.955650][ T8072]  kvm_mmu_load+0xe2/0x2570
[  119.955665][ T8072]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[  119.955679][ T8072]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[  119.955692][ T8072]  ? __pfx_kvm_mmu_load+0x10/0x10
[  119.955706][ T8072]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[  119.955719][ T8072]  ? kvm_check_and_inject_events+0x873/0x12a0
[  119.955735][ T8072]  ? record_steal_time+0x3a0/0xbb0
[  119.955748][ T8072]  vcpu_run+0x3aaa/0x5de0
[  119.955769][ T8072]  ? __pfx_vcpu_run+0x10/0x10
[  119.955789][ T8072]  ? rcu_is_watching+0x12/0xc0
[  119.955809][ T8072]  ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  119.955824][ T8072]  kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  119.955844][ T8072]  kvm_vcpu_ioctl+0x730/0x1700
[  119.955857][ T8072]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  119.955869][ T8072]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  119.955884][ T8072]  ? do_vfs_ioctl+0x226/0x13e0
[  119.955901][ T8072]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  119.955916][ T8072]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  119.955940][ T8072]  ? __fget_files+0x215/0x3d0
[  119.955951][ T8072]  ? hook_file_ioctl_common+0x140/0x440
[  119.955968][ T8072]  ? selinux_file_ioctl+0x13b/0x290
[  119.955984][ T8072]  ? selinux_file_ioctl+0xb6/0x290
[  119.956002][ T8072]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  119.956014][ T8072]  __x64_sys_ioctl+0x18e/0x210
[  119.956031][ T8072]  do_syscall_64+0x115/0x870
[  119.956045][ T8072]  ? clear_bhb_loop+0x40/0x90
[  119.956059][ T8072]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.956070][ T8072] RIP: 0033:0x7fbba739e0d9
[  119.956079][ T8072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.956089][ T8072] RSP: 002b:00007fbba8249028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  119.956101][ T8072] RAX: ffffffffffffffda RBX: 00007fbba7625fa0 RCX: 00007fbba739e0d9
[  119.956108][ T8072] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  119.956114][ T8072] RBP: 00007fbba8249090 R08: 0000000000000000 R09: 0000000000000000
[  119.956120][ T8072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  119.956126][ T8072] R13: 00007fbba7626038 R14: 00007fbba7625fa0 R15: 00007ffe63b3cab8
[  119.956139][ T8072]  </TASK>
[  120.017644][ T8079] 9pnet_virtio: no channels available for device syz
[  120.072328][ T8081] overlayfs: failed to resolve './cgroup': -2
[  120.089285][ T8079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.659'.
[  120.092730][ T8079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.659'.
[  120.096232][ T8079] netlink: 24 bytes leftover after parsing attributes in process `syz.4.659'.
[  120.185741][   T42] kauditd_printk_skb: 21 callbacks suppressed
[  120.185753][   T42] audit: type=1400 audit(1785936253.991:622): avc:  denied  { lock } for  pid=8085 comm="syz.1.661" path="/dev/vmci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  120.328911][   T42] audit: type=1400 audit(1785936254.131:623): avc:  denied  { map } for  pid=8096 comm="syz.1.666" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[  120.372467][   T42] audit: type=1400 audit(1785936254.181:624): avc:  denied  { ioctl } for  pid=8096 comm="syz.1.666" path="/176/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[  120.432123][ T8103] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  120.440419][ T8103] CIFS: Attempting to mount //127.0.0.1/share
[  120.449751][ T8103] CIFS: VFS: Error connecting to socket. Aborting operation.
[  120.453812][ T8103] CIFS: VFS: cifs_mount failed w/return code = -111
[  120.482775][ T8110] 9pnet_virtio: no channels available for device syz
[  120.540060][ T8112] FAULT_INJECTION: forcing a failure.
[  120.540060][ T8112] name failslab, interval 1, probability 0, space 0, times 0
[  120.545797][ T8112] CPU: 0 UID: 0 PID: 8112 Comm: syz.4.671 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  120.545817][ T8112] Tainted: [L]=SOFTLOCKUP
[  120.545821][ T8112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  120.545827][ T8112] Call Trace:
[  120.545832][ T8112]  <TASK>
[  120.545836][ T8112]  dump_stack_lvl+0x100/0x190
[  120.545856][ T8112]  should_fail_ex.cold+0x5/0xa
[  120.545871][ T8112]  should_failslab+0xc2/0x120
[  120.545886][ T8112]  kmem_cache_alloc_noprof+0x91/0x6a0
[  120.545901][ T8112]  ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  120.545918][ T8112]  __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  120.545934][ T8112]  mmu_topup_memory_caches+0x25/0x170
[  120.545952][ T8112]  kvm_mmu_load+0xe2/0x2570
[  120.545966][ T8112]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[  120.545978][ T8112]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[  120.545991][ T8112]  ? __pfx_kvm_mmu_load+0x10/0x10
[  120.546004][ T8112]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[  120.546018][ T8112]  ? kvm_check_and_inject_events+0x873/0x12a0
[  120.546034][ T8112]  ? record_steal_time+0x3a0/0xbb0
[  120.546047][ T8112]  vcpu_run+0x3aaa/0x5de0
[  120.546068][ T8112]  ? __pfx_vcpu_run+0x10/0x10
[  120.546088][ T8112]  ? rcu_is_watching+0x12/0xc0
[  120.546107][ T8112]  ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  120.546123][ T8112]  kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  120.546143][ T8112]  kvm_vcpu_ioctl+0x730/0x1700
[  120.546156][ T8112]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  120.546168][ T8112]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  120.546183][ T8112]  ? do_vfs_ioctl+0x226/0x13e0
[  120.546200][ T8112]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  120.546216][ T8112]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  120.546238][ T8112]  ? __fget_files+0x215/0x3d0
[  120.546254][ T8112]  ? hook_file_ioctl_common+0x140/0x440
[  120.546271][ T8112]  ? selinux_file_ioctl+0x13b/0x290
[  120.546287][ T8112]  ? selinux_file_ioctl+0xb6/0x290
[  120.546304][ T8112]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  120.546317][ T8112]  __x64_sys_ioctl+0x18e/0x210
[  120.546333][ T8112]  do_syscall_64+0x115/0x870
[  120.546347][ T8112]  ? clear_bhb_loop+0x40/0x90
[  120.546361][ T8112]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.546372][ T8112] RIP: 0033:0x7f5a5179e0d9
[  120.546382][ T8112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  120.546393][ T8112] RSP: 002b:00007f5a525f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  120.546404][ T8112] RAX: ffffffffffffffda RBX: 00007f5a51a25fa0 RCX: 00007f5a5179e0d9
[  120.546411][ T8112] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  120.546417][ T8112] RBP: 00007f5a525f3090 R08: 0000000000000000 R09: 0000000000000000
[  120.546423][ T8112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  120.546429][ T8112] R13: 00007f5a51a26038 R14: 00007f5a51a25fa0 R15: 00007ffeb92acb68
[  120.546443][ T8112]  </TASK>
[  120.792523][   T42] audit: type=1400 audit(1785936254.601:625): avc:  denied  { write } for  pid=8118 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  120.819638][ T8123] overlayfs: upper fs does not support file handles, falling back to index=off.
[  120.828605][ T8123] netlink: 'syz.3.674': attribute type 5 has an invalid length.
[  120.854770][   T42] audit: type=1400 audit(1785936254.661:626): avc:  denied  { write } for  pid=8124 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  120.948838][   T42] audit: type=1400 audit(1785936254.751:627): avc:  denied  { write } for  pid=8129 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  121.004762][   T42] audit: type=1400 audit(1785936254.811:628): avc:  denied  { write } for  pid=8133 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  121.290416][   T42] audit: type=1400 audit(1785936255.091:629): avc:  denied  { write } for  pid=8139 comm="syz.4.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  121.481931][ T5746] Bluetooth: hci4: command tx timeout
[  121.583981][ T8154] kvm: requested 23466 ns i8254 timer period limited to 200000 ns
[  121.598770][ T8154] kvm: requested 73752 ns i8254 timer period limited to 200000 ns
[  121.604227][ T8154] kvm: requested 127390 ns i8254 timer period limited to 200000 ns
[  121.609788][ T8154] kvm: requested 25142 ns i8254 timer period limited to 200000 ns
[  121.665554][ T8154] kvm: requested 78781 ns i8254 timer period limited to 200000 ns
[  122.039167][   T42] audit: type=1400 audit(1785936255.841:630): avc:  denied  { name_bind } for  pid=8173 comm="syz.4.690" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[  122.095962][   T42] audit: type=1400 audit(1785936255.901:631): avc:  denied  { ioctl } for  pid=8175 comm="syz.4.691" path="socket:[34035]" dev="sockfs" ino=34035 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  122.179773][ T8180] loop2: detected capacity change from 0 to 7
[  122.188524][ T8180] Dev loop2: unable to read RDB block 7
[  122.192817][ T8180]  loop2: unable to read partition table
[  122.196438][ T8180] loop2: partition table beyond EOD, truncated
[  122.199376][ T8180] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  122.331331][ T1361] usb 5-1: USB disconnect, device number 7
[  122.350632][ T8189] usb usb8: usbfs: process 8189 (syz.1.698) did not claim interface 7 before use
[  122.450851][ T1361] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  122.459595][ T1361] ti_usb_3410_5052_2 ttyUSB2: TI USB 5052 2 port adapter converter now disconnected from ttyUSB2
[  122.465058][ T1361] ti_usb_3410_5052 5-1:2.0: device disconnected
[  122.608283][ T8196] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.613892][ T8196] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.728984][ T8196] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.735179][ T8196] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.909056][ T8206] bridge_slave_0: left allmulticast mode
[  122.911347][ T8206] bridge_slave_0: left promiscuous mode
[  122.915374][ T8206] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.924102][ T8206] bridge_slave_1: left allmulticast mode
[  122.926444][ T8206] bridge_slave_1: left promiscuous mode
[  122.928754][ T8206] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.941007][ T8206] bond0: (slave bond_slave_0): Releasing backup interface
[  122.952940][ T8206] bond0: (slave bond_slave_1): Releasing backup interface
[  122.961590][ T8206] team0: Port device team_slave_0 removed
[  122.971230][ T8206] team0: Port device team_slave_1 removed
[  122.976145][ T8206] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.981480][ T8206] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.990252][ T8206] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.994962][ T8206] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.003628][ T8206] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  123.012303][ T5825] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.015747][ T5825] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.019713][ T5825] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.023126][ T5825] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.059047][ T8209] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  123.504912][ T8244] kvm: requested 5028 ns i8254 timer period limited to 200000 ns
[  123.521336][ T8244] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  123.524950][ T8244] kvm: requested 13409 ns i8254 timer period limited to 200000 ns
[  123.529533][ T8244] kvm: requested 53638 ns i8254 timer period limited to 200000 ns
[  123.532397][ T8244] kvm: requested 41904 ns i8254 timer period limited to 200000 ns
[  123.562070][ T5746] Bluetooth: hci4: command tx timeout
[  124.121867][ T5824] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  124.274619][ T5824] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  124.278696][ T5824] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  124.286668][ T5824] usb 9-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[  124.290743][ T5824] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.294079][ T5824] usb 9-1: Product: syz
[  124.295836][ T5824] usb 9-1: Manufacturer: syz
[  124.297787][ T5824] usb 9-1: SerialNumber: syz
[  124.465712][ T8276] tc_dump_action: action bad kind
[  124.519938][ T5824] usb 9-1: unit 39 not found!
[  124.523226][ T5824] usb 9-1: unit 243 not found!
[  124.561567][ T5824] usb 9-1: USB disconnect, device number 2
[  124.945929][ T8297] xt_hashlimit: max too large, truncated to 1048576
[  125.385897][   T42] kauditd_printk_skb: 3 callbacks suppressed
[  125.385925][   T42] audit: type=1400 audit(1785936259.191:635): avc:  denied  { set_context_mgr } for  pid=8319 comm="syz.4.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  125.387147][ T8320] binder: BINDER_SET_CONTEXT_MGR already set
[  125.398256][ T8320] binder: 8319:8320 ioctl 4018620d 200000001000 returned -16
[  125.650377][   T42] audit: type=1400 audit(1785936259.451:636): avc:  denied  { call } for  pid=8329 comm="syz.1.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  125.669864][   T42] audit: type=1400 audit(1785936259.451:637): avc:  denied  { transfer } for  pid=8329 comm="syz.1.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  125.790975][   T42] audit: type=1400 audit(1785936259.591:638): avc:  denied  { connect } for  pid=8335 comm="syz.1.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  125.814706][   T42] audit: type=1400 audit(1785936259.621:639): avc:  denied  { write } for  pid=8335 comm="syz.1.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  125.861414][ T8343] bridge_slave_0: left allmulticast mode
[  125.863648][ T8343] bridge_slave_0: left promiscuous mode
[  125.865643][ T8343] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.876469][ T8343] bridge_slave_1: left allmulticast mode
[  125.878446][ T8343] bridge_slave_1: left promiscuous mode
[  125.880568][ T8343] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.887608][ T8343] bond0: (slave bond_slave_0): Releasing backup interface
[  125.891654][ T8343] bond0: (slave bond_slave_1): Releasing backup interface
[  125.896905][ T8343] team0: Port device team_slave_0 removed
[  125.901126][ T8343] team0: Port device team_slave_1 removed
[  125.904256][ T8343] batman_adv: batadv0: Removing interface: batadv_slave_0
[  125.908325][ T8343] batman_adv: batadv0: Removing interface: batadv_slave_1
[  125.912452][ T8343] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  126.037138][ T8348] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality.
[  126.099260][   T42] audit: type=1400 audit(1785936259.901:640): avc:  denied  { getopt } for  pid=8351 comm="syz.3.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  126.113168][   T42] audit: type=1400 audit(1785936259.911:641): avc:  denied  { getopt } for  pid=8347 comm="syz.1.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  126.138004][   T42] audit: type=1400 audit(1785936259.941:642): avc:  denied  { read } for  pid=8351 comm="syz.3.762" dev="nsfs" ino=4026533016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  126.147743][   T42] audit: type=1400 audit(1785936259.941:643): avc:  denied  { open } for  pid=8351 comm="syz.3.762" path="net:[4026533016]" dev="nsfs" ino=4026533016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  126.157662][   T42] audit: type=1400 audit(1785936259.941:644): avc:  denied  { create } for  pid=8351 comm="syz.3.762" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=llc_socket permissive=1
[  126.262075][ T8360] FAULT_INJECTION: forcing a failure.
[  126.262075][ T8360] name failslab, interval 1, probability 0, space 0, times 0
[  126.266158][ T8360] CPU: 0 UID: 0 PID: 8360 Comm: syz.3.764 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  126.266175][ T8360] Tainted: [L]=SOFTLOCKUP
[  126.266179][ T8360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  126.266192][ T8360] Call Trace:
[  126.266202][ T8360]  <TASK>
[  126.266207][ T8360]  dump_stack_lvl+0x100/0x190
[  126.266270][ T8360]  should_fail_ex.cold+0x5/0xa
[  126.266295][ T8360]  should_failslab+0xc2/0x120
[  126.266334][ T8360]  kmem_cache_alloc_noprof+0x91/0x6a0
[  126.266357][ T8360]  ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  126.266379][ T8360]  __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  126.266396][ T8360]  mmu_topup_memory_caches+0x25/0x170
[  126.266424][ T8360]  kvm_mmu_load+0xe2/0x2570
[  126.266439][ T8360]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[  126.266451][ T8360]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[  126.266464][ T8360]  ? __pfx_kvm_mmu_load+0x10/0x10
[  126.266478][ T8360]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[  126.266496][ T8360]  ? kvm_check_and_inject_events+0x873/0x12a0
[  126.266513][ T8360]  ? record_steal_time+0x3a0/0xbb0
[  126.266526][ T8360]  vcpu_run+0x3aaa/0x5de0
[  126.266547][ T8360]  ? __pfx_vcpu_run+0x10/0x10
[  126.266567][ T8360]  ? rcu_is_watching+0x12/0xc0
[  126.266603][ T8360]  ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  126.266619][ T8360]  kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  126.266642][ T8360]  kvm_vcpu_ioctl+0x730/0x1700
[  126.266656][ T8360]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  126.266668][ T8360]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  126.266689][ T8360]  ? do_vfs_ioctl+0x226/0x13e0
[  126.266712][ T8360]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  126.266727][ T8360]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  126.266771][ T8360]  ? __fget_files+0x215/0x3d0
[  126.266784][ T8360]  ? hook_file_ioctl_common+0x140/0x440
[  126.266805][ T8360]  ? selinux_file_ioctl+0x13b/0x290
[  126.266821][ T8360]  ? selinux_file_ioctl+0xb6/0x290
[  126.266839][ T8360]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  126.266851][ T8360]  __x64_sys_ioctl+0x18e/0x210
[  126.266868][ T8360]  do_syscall_64+0x115/0x870
[  126.266889][ T8360]  ? clear_bhb_loop+0x40/0x90
[  126.266903][ T8360]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.266914][ T8360] RIP: 0033:0x7fbba739e0d9
[  126.266924][ T8360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  126.266935][ T8360] RSP: 002b:00007fbba8249028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  126.266951][ T8360] RAX: ffffffffffffffda RBX: 00007fbba7625fa0 RCX: 00007fbba739e0d9
[  126.266957][ T8360] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  126.266964][ T8360] RBP: 00007fbba8249090 R08: 0000000000000000 R09: 0000000000000000
[  126.266970][ T8360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  126.266976][ T8360] R13: 00007fbba7626038 R14: 00007fbba7625fa0 R15: 00007ffe63b3cab8
[  126.266989][ T8360]  </TASK>
[  126.494498][ T8372] 9pnet_virtio: no channels available for device syz
[  126.503859][ T8372] __nla_validate_parse: 6 callbacks suppressed
[  126.503875][ T8372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.768'.
[  126.510217][ T8372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.768'.
[  126.514129][ T8372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.768'.
[  126.588496][ T8378] SELinux: security_context_str_to_sid (4m§se�vS„:"-”„½ôXòF@
) failed with errno=-22
[  126.594665][ T8378] SELinux: security_context_str_to_sid (4m§se�vS„:"-”„½ôXòF@
) failed with errno=-22
[  126.598018][ T8378] SELinux: security_context_str_to_sid (4m§se�vS„:"-”„½ôXòF@
) failed with errno=-22
[  126.601135][ T8378] SELinux: security_context_str_to_sid (4m§se�vS„:"-”„½ôXòF@
) failed with errno=-22
[  126.607972][ T8378] SELinux: security_context_str_to_sid (4m§se�vS„:"-”„½ôXòF@
) failed with errno=-22
[  126.613977][ T8378] SELinux: security_context_str_to_sid (4m§se�vS„:"-”„½ôXòF@
) failed with errno=-22
[  126.620634][ T8378] SELinux: security_context_str_to_sid (4m§se�vS„:"-”„½ôXòF@
) failed with errno=-22
[  126.624951][ T8378] SELinux: security_context_str_to_sid (4m§se�vS„:"-”„½ôXòF@
) failed with errno=-22
[  126.628821][ T8378] SELinux: security_context_str_to_sid (4m§se�vS„:"-”„½ôXòF@
) failed with errno=-22
[  126.632198][ T8378] SELinux: security_context_str_to_sid (4m§se�vS„:"-”„½ôXòF@
) failed with errno=-22
[  126.636111][ T8378] SELinux: security_context_str_to_sid (4m§se�vS„:"-”„½ôXòF@
) failed with errno=-22
[  126.639648][ T8378] SELinux: security_context_str_to_sid (4m§se�vS„:"-”„½ôXòF@
) failed with errno=-22
[  126.662297][ T8383] netlink: 'syz.1.771': attribute type 2 has an invalid length.
[  126.665105][ T8383] netlink: 46 bytes leftover after parsing attributes in process `syz.1.771'.
[  126.855772][ T8399] FAULT_INJECTION: forcing a failure.
[  126.855772][ T8399] name failslab, interval 1, probability 0, space 0, times 0
[  126.859993][ T8399] CPU: 1 UID: 0 PID: 8399 Comm: syz.1.775 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  126.860011][ T8399] Tainted: [L]=SOFTLOCKUP
[  126.860014][ T8399] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  126.860021][ T8399] Call Trace:
[  126.860026][ T8399]  <TASK>
[  126.860031][ T8399]  dump_stack_lvl+0x100/0x190
[  126.860050][ T8399]  should_fail_ex.cold+0x5/0xa
[  126.860065][ T8399]  should_failslab+0xc2/0x120
[  126.860081][ T8399]  kmem_cache_alloc_noprof+0x91/0x6a0
[  126.860096][ T8399]  ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  126.860112][ T8399]  __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  126.860129][ T8399]  mmu_topup_memory_caches+0x25/0x170
[  126.860147][ T8399]  kvm_mmu_load+0xe2/0x2570
[  126.860162][ T8399]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[  126.860174][ T8399]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[  126.860187][ T8399]  ? __pfx_kvm_mmu_load+0x10/0x10
[  126.860200][ T8399]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[  126.860214][ T8399]  ? kvm_check_and_inject_events+0x873/0x12a0
[  126.860231][ T8399]  ? record_steal_time+0x3a0/0xbb0
[  126.860249][ T8399]  vcpu_run+0x3aaa/0x5de0
[  126.860270][ T8399]  ? __pfx_vcpu_run+0x10/0x10
[  126.860290][ T8399]  ? rcu_is_watching+0x12/0xc0
[  126.860309][ T8399]  ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  126.860325][ T8399]  kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  126.860345][ T8399]  kvm_vcpu_ioctl+0x730/0x1700
[  126.860358][ T8399]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  126.860370][ T8399]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  126.860385][ T8399]  ? do_vfs_ioctl+0x226/0x13e0
[  126.860402][ T8399]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  126.860418][ T8399]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  126.860442][ T8399]  ? __fget_files+0x215/0x3d0
[  126.860453][ T8399]  ? hook_file_ioctl_common+0x140/0x440
[  126.860469][ T8399]  ? selinux_file_ioctl+0x13b/0x290
[  126.860485][ T8399]  ? selinux_file_ioctl+0xb6/0x290
[  126.860503][ T8399]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  126.860515][ T8399]  __x64_sys_ioctl+0x18e/0x210
[  126.860532][ T8399]  do_syscall_64+0x115/0x870
[  126.860546][ T8399]  ? clear_bhb_loop+0x40/0x90
[  126.860560][ T8399]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.860572][ T8399] RIP: 0033:0x7f479ef9e0d9
[  126.860582][ T8399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  126.860592][ T8399] RSP: 002b:00007f479feff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  126.860604][ T8399] RAX: ffffffffffffffda RBX: 00007f479f225fa0 RCX: 00007f479ef9e0d9
[  126.860610][ T8399] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  126.860616][ T8399] RBP: 00007f479feff090 R08: 0000000000000000 R09: 0000000000000000
[  126.860623][ T8399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  126.860628][ T8399] R13: 00007f479f226038 R14: 00007f479f225fa0 R15: 00007ffdc5527d48
[  126.860642][ T8399]  </TASK>
[  127.614665][ T8460] tipc: Failed to remove unknown binding: 66,0,0/4:2136093815/2136093818
[  127.618883][ T8460] tipc: Failed to remove unknown binding: 66,0,0/4:2136093815/2136093817
[  127.621549][ T8460] tipc: Failed to remove unknown binding: 66,0,0/4:2136093815/2136093816
[  127.625487][ T8461] tipc: Failed to remove unknown binding: 66,0,0/4:2136093815/2136093818
[  127.628156][ T8461] tipc: Failed to remove unknown binding: 66,0,0/4:2136093815/2136093817
[  127.630776][ T8461] tipc: Failed to remove unknown binding: 66,0,0/4:2136093815/2136093816
[  127.633964][ T8460] tipc: Failed to remove unknown binding: 66,0,0/4:2136093815/2136093818
[  127.638197][ T8460] tipc: Failed to remove unknown binding: 66,0,0/4:2136093815/2136093817
[  127.640869][ T8460] tipc: Failed to remove unknown binding: 66,0,0/4:2136093815/2136093816
[  127.892028][ T5893] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  128.071948][ T5893] usb 5-1: Using ep0 maxpacket: 32
[  128.085109][ T5893] usb 5-1: unable to get BOS descriptor or descriptor too short
[  128.093007][   T50] IPVS: starting estimator thread 0...
[  128.099150][ T5893] usb 5-1: config 14 has an invalid interface number: 57 but max is 1
[  128.105348][ T5893] usb 5-1: config 14 has an invalid interface number: 228 but max is 1
[  128.108292][ T5893] usb 5-1: config 14 has no interface number 0
[  128.110232][ T5893] usb 5-1: config 14 has no interface number 1
[  128.110336][ T8494] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=4368 sclass=netlink_xfrm_socket pid=8494 comm=syz.4.803
[  128.114990][ T5893] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  128.120047][ T5893] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  128.129797][ T5893] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  128.134354][ T5893] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  128.138350][ T5893] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  128.142564][ T5893] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  128.149300][ T5893] usb 5-1: config 14 interface 57 has no altsetting 0
[  128.153170][ T5893] usb 5-1: config 14 interface 228 has no altsetting 0
[  128.157197][ T5893] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  128.160603][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.163645][ T5893] usb 5-1: Product: syz
[  128.163730][ T8499] netlink: 'syz.4.805': attribute type 1 has an invalid length.
[  128.164990][ T5893] usb 5-1: Manufacturer: syz
[  128.165001][ T5893] usb 5-1: SerialNumber: syz
[  128.182254][ T8491] IPVS: using max 45 ests per chain, 108000 per kthread
[  128.196875][ T8499] bond1: entered promiscuous mode
[  128.199708][ T8499] 8021q: adding VLAN 0 to HW filter on device bond1
[  128.455900][ T8517] xt_TPROXY: Can be used only with -p tcp or -p udp
[  128.539772][ T8520] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint
[  128.573205][ T8520] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref]
[  128.577441][ T8520] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]
[  128.580218][ T8520] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff]
[  128.582432][ T8520] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  128.582521][ T5893] legousbtower 5-1:14.57: interrupt endpoints not found
[  128.585258][ T8520] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  128.609875][ T8520] pci 0000:00:01.0: Adding to iommu group 1
[  128.618642][ T8520] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  128.621096][ T8520] pci 0000:00:01.0: vgaarb: bridge control possible
[  128.623692][ T8520] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  128.629437][ T8520] pci 0000:00:05.0: [1af4:1009] type 00 class 0x000200 conventional PCI endpoint
[  128.637430][ T8520] pci 0000:00:05.0: BAR 0 [io  0xc0c0-0xc0df]
[  128.639379][ T8520] pci 0000:00:05.0: BAR 1 [mem 0xfeaf6000-0xfeaf6fff]
[  128.641773][ T8520] pci 0000:00:05.0: BAR 4 [mem 0x380800008000-0x38080000bfff 64bit pref]
[  128.652121][ T8520] pci 0000:00:05.0: Adding to iommu group 5
[  128.662073][ T8520] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned
[  128.673158][ T8520] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned
[  128.681405][ T8520] pci 0000:00:05.0: BAR 4 [mem 0x380800008000-0x38080000bfff 64bit pref]: assigned
[  128.686813][ T8520] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned
[  128.690231][ T8520] pci 0000:00:05.0: BAR 1 [mem 0x80801000-0x80801fff]: assigned
[  128.693989][ T8520] pci 0000:00:05.0: BAR 0 [io  0x2000-0x201f]: assigned
[  128.746764][ T8520] [drm] pci: virtio-vga detected at 0000:00:01.0
[  128.750649][ T8520] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console
[  128.754802][ T8520] [drm] features: -virgl +edid -resource_blob -host_visible
[  128.754814][ T8520] [drm] features: -context_init -blob_alignment
[  128.775644][ T8520] [drm] number of scanouts: 1
[  128.777187][ T8520] [drm] number of cap sets: 0
[  128.809692][ T8520] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 2
[  128.878613][ T8520] virtio-pci 0000:00:01.0: [drm] fb1: virtio_gpudrmfb frame buffer device
[  128.916173][ T8464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.793'.
[  128.965356][ T5893] legousbtower 5-1:14.228: get version request failed: -71
[  128.968609][ T5893] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71
[  128.980620][ T5893] usb 5-1: USB disconnect, device number 8
[  129.016119][   T10] hid-generic 0000:0000:0000.0002: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  129.058997][ T8530] CPU: 2 UID: 0 PID: 8530 Comm: syz.3.814 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  129.059026][ T8530] Tainted: [L]=SOFTLOCKUP
[  129.059034][ T8530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  129.059059][ T8530] Call Trace:
[  129.059077][ T8530]  <TASK>
[  129.059087][ T8530]  dump_stack_lvl+0x100/0x190
[  129.059236][ T8530]  hid_report_raw_event.cold+0xbd/0xf0
[  129.059280][ T8530]  ? mark_held_locks+0x40/0x70
[  129.059341][ T8530]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  129.059396][ T8530]  ? lockdep_hardirqs_on+0x78/0x100
[  129.059423][ T8530]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  129.059450][ T8530]  __hid_input_report.constprop.0+0x349/0x470
[  129.059517][ T8530]  uhid_char_write+0xb6b/0x10e0
[  129.059554][ T8530]  vfs_write+0x2aa/0x1050
[  129.059605][ T8530]  ? __pfx_uhid_char_write+0x10/0x10
[  129.059630][ T8530]  ? __pfx_vfs_write+0x10/0x10
[  129.059659][ T8530]  ? find_held_lock+0x2b/0x80
[  129.059681][ T8530]  ? __fget_files+0x215/0x3d0
[  129.059731][ T8530]  ? __fget_files+0x215/0x3d0
[  129.059758][ T8530]  ? __fget_files+0x21f/0x3d0
[  129.059787][ T8530]  ksys_write+0x1f8/0x250
[  129.059806][ T8530]  ? __pfx_ksys_write+0x10/0x10
[  129.059824][ T8530]  ? kcov_ioctl+0x17a/0x750
[  129.059865][ T8530]  do_syscall_64+0x115/0x870
[  129.059907][ T8530]  ? clear_bhb_loop+0x40/0x90
[  129.059947][ T8530]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.059969][ T8530] RIP: 0033:0x7fbba739e0d9
[  129.059986][ T8530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  129.060007][ T8530] RSP: 002b:00007fbba8228028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  129.060037][ T8530] RAX: ffffffffffffffda RBX: 00007fbba7626090 RCX: 00007fbba739e0d9
[  129.060050][ T8530] RDX: 000000000000000b RSI: 0000200000000400 RDI: 0000000000000005
[  129.060063][ T8530] RBP: 00007fbba7435024 R08: 0000000000000000 R09: 0000000000000000
[  129.060075][ T8530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  129.060088][ T8530] R13: 00007fbba7626128 R14: 00007fbba7626090 R15: 00007ffe63b3cab8
[  129.060115][ T8530]  </TASK>
[  129.515893][ T8556] overlayfs: failed to resolve './cgroup': -2
[  129.529535][ T8556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.822'.
[  129.532578][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.822'.
[  129.536094][ T8556] netlink: 24 bytes leftover after parsing attributes in process `syz.4.822'.
[  129.794000][ T8571] loop5: detected capacity change from 0 to 7
[  129.817758][ T8571] Dev loop5: unable to read RDB block 7
[  129.821992][ T8571]  loop5: unable to read partition table
[  129.824137][ T8571] loop5: partition table beyond EOD, truncated
[  129.826333][ T8571] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  129.875178][ T8571] Dev loop5: unable to read RDB block 7
[  129.877615][ T8571]  loop5: unable to read partition table
[  129.880158][ T8571] loop5: partition table beyond EOD, truncated
[  129.883193][ T8571] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  129.933113][ T8576] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  129.936839][ T8576] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6
[  129.980288][ T8579] xt_socket: unknown flags 0x4c
[  130.563003][ T8587] IPv6: NLM_F_CREATE should be specified when creating new route
[  130.568122][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.833'.
[  130.639947][   T42] kauditd_printk_skb: 21 callbacks suppressed
[  130.639976][   T42] audit: type=1400 audit(1785936264.441:666): avc:  denied  { write } for  pid=8593 comm="syz.3.834" name="/" dev="9p" ino=76573371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  130.669293][ T8594] overlayfs: failed to resolve './cgroup': -2
[  130.673585][   T42] audit: type=1400 audit(1785936264.481:667): avc:  denied  { write } for  pid=8593 comm="syz.3.834" name="bus" dev="9p" ino=76573453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  130.683204][   T42] audit: type=1800 audit(1785936264.481:668): pid=8594 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.834" name="file0" dev="9p" ino=76573455 res=0 errno=0
[  130.683265][ T8594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.834'.
[  130.780028][ T8598] create_pit_timer: 9 callbacks suppressed
[  130.780060][ T8598] kvm: requested 49447 ns i8254 timer period limited to 200000 ns
[  130.790608][ T8598] kvm: requested 195276 ns i8254 timer period limited to 200000 ns
[  130.817793][ T8598] kvm: requested 178514 ns i8254 timer period limited to 200000 ns
[  130.824317][ T8598] kvm: requested 76266 ns i8254 timer period limited to 200000 ns
[  130.828733][ T8598] kvm: requested 12571 ns i8254 timer period limited to 200000 ns
[  130.833848][ T8598] kvm: requested 34361 ns i8254 timer period limited to 200000 ns
[  130.841315][ T8598] kvm: requested 113142 ns i8254 timer period limited to 200000 ns
[  130.846526][ T8598] kvm: requested 47771 ns i8254 timer period limited to 200000 ns
[  130.850195][ T8598] kvm: requested 185219 ns i8254 timer period limited to 200000 ns
[  130.856955][ T8598] kvm: requested 178514 ns i8254 timer period limited to 200000 ns
[  130.865129][ T8606] 8021q: VLANs not supported on sit0
[  130.875739][   T42] audit: type=1400 audit(1785936264.681:669): avc:  denied  { map } for  pid=8605 comm="syz.4.839" path="/dev/net/tun" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1
[  130.898916][   T42] audit: type=1400 audit(1785936264.691:670): avc:  denied  { execute } for  pid=8605 comm="syz.4.839" path="/dev/net/tun" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1
[  130.921859][ T7334] IPVS: ip_vs_send_async error -101
[  130.978893][   T42] audit: type=1400 audit(1785936264.781:671): avc:  denied  { create } for  pid=8609 comm="syz.3.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  130.984208][ T8612] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  130.992881][   T42] audit: type=1400 audit(1785936264.781:672): avc:  denied  { bind } for  pid=8609 comm="syz.3.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  131.000670][   T42] audit: type=1400 audit(1785936264.781:673): avc:  denied  { setopt } for  pid=8609 comm="syz.3.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  131.012419][   T42] audit: type=1400 audit(1785936264.781:674): avc:  denied  { accept } for  pid=8609 comm="syz.3.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  131.020694][   T42] audit: type=1400 audit(1785936264.781:675): avc:  denied  { write } for  pid=8609 comm="syz.3.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  131.165089][ T5149] Dev loop5: unable to read RDB block 7
[  131.167501][ T5149]  loop5: unable to read partition table
[  131.169921][ T5149] loop5: partition table beyond EOD, truncated
[  131.661092][ T5809] usb 7-1: USB disconnect, device number 4
[  131.676638][ T5809] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0
[  131.682089][ T5817] nci: nci_rx_work: unknown MT 0x1
[  131.682305][ T8641] misc userio: The device must be registered before sending interrupts
[  131.692555][ T5809] opticon 7-1:1.0: device disconnected
[  131.748061][ T5817] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.870415][ T5817] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.003859][ T8649] __nla_validate_parse: 2 callbacks suppressed
[  132.003885][ T8649] netlink: 20 bytes leftover after parsing attributes in process `syz.1.850'.
[  132.012385][ T8648] Bluetooth: hci3: Frame reassembly failed (-84)
[  132.061329][ T5817] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.167240][ T5817] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.322730][ T5817] bridge_slave_1: left allmulticast mode
[  132.326215][ T5817] bridge_slave_1: left promiscuous mode
[  132.330234][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.340103][ T5817] bridge_slave_0: left allmulticast mode
[  132.343732][ T5817] bridge_slave_0: left promiscuous mode
[  132.346395][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.380266][ T8636] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  132.389784][ T8644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  132.498798][ T8658] netlink: 32 bytes leftover after parsing attributes in process `syz.3.854'.
[  132.521609][ T5817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  132.533161][ T5817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  132.536992][ T5817] bond0 (unregistering): Released all slaves
[  132.548207][ T5817] bond1 (unregistering): (slave veth3): Releasing active interface
[  132.552139][ T5817] bond1 (unregistering): Released all slaves
[  132.553866][ T8660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8660 comm=syz.3.854
[  132.637359][ T8666] tcpci 0-0050: Can't find connector node.
[  132.643043][ T8666] tcpci 0-0050: probe with driver tcpci failed with error -22
[  132.649230][ T8666] i2c i2c-0: new_device: Instantiated device tcpci at 0x50
[  132.703452][ T8666] tcpci 1-0005: probe with driver tcpci failed with error -5
[  132.706923][ T8666] i2c i2c-1: new_device: Instantiated device tcpci at 0x05
[  132.767808][ T5451] 8021q: adding VLAN 0 to HW filter on device eth1
[  132.819078][ T8679] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.858'.
[  132.940550][ T1446] ieee802154 phy0 wpan0: encryption failed: -22
[  132.942982][ T1446] ieee802154 phy1 wpan1: encryption failed: -22
[  133.005890][ T5817] hsr_slave_0: left promiscuous mode
[  133.008307][ T5817] hsr_slave_1: left promiscuous mode
[  133.011304][ T5817] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  133.014789][ T5817] batman_adv: batadv0: Removing interface: batadv_slave_0
[  133.025410][ T5817] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  133.028451][ T5817] batman_adv: batadv0: Removing interface: batadv_slave_1
[  133.036152][ T5817] veth1_macvtap: left promiscuous mode
[  133.040248][ T5817] veth0_macvtap: left promiscuous mode
[  133.043265][ T5817] veth1_vlan: left promiscuous mode
[  133.045139][ T5817] veth0_vlan: left promiscuous mode
[  133.230362][ T5817] team0 (unregistering): Port device team_slave_1 removed
[  133.241456][ T5817] team0 (unregistering): Port device team_slave_0 removed
[  133.411207][ T5451] 8021q: adding VLAN 0 to HW filter on device eth2
[  133.427120][ T8715] program syz.3.868 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  133.427804][ T8716] program syz.3.868 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  133.636838][ T5451] 8021q: adding VLAN 0 to HW filter on device eth3
[  133.764976][ T8746] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  133.829687][ T5451] 8021q: adding VLAN 0 to HW filter on device eth4
[  133.872364][ T5817] IPVS: stop unused estimator thread 0...
[  133.951371][ T8764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.877'.
[  133.954429][ T8764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.877'.
[  134.052626][ T5749] Bluetooth: hci3: command 0xfc11 tx timeout
[  134.058840][ T5746] Bluetooth: hci3: Entering manufacturer mode failed (-110)
[  134.704487][ T8798] overlayfs: failed to resolve './cgroup': -2
[  134.710001][ T8798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.888'.
[  134.715210][ T8798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.888'.
[  134.719007][ T8798] netlink: 24 bytes leftover after parsing attributes in process `syz.1.888'.
[  134.885819][ T8804] 9p: Bad value for 'msize'
[  135.848540][ T8851] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  135.880899][ T8856] netlink: 'syz.1.909': attribute type 21 has an invalid length.
[  135.888862][ T8856] IPv6: NLM_F_CREATE should be specified when creating new route
[  135.895976][ T5839] hid-generic 0362:07FF:7FFFFFFF.0003: item fetching failed at offset 0/1
[  135.899342][ T8856] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  135.902303][ T8856] IPv6: NLM_F_CREATE should be set when creating new route
[  135.904664][ T8856] IPv6: NLM_F_CREATE should be set when creating new route
[  135.906940][ T8856] IPv6: NLM_F_CREATE should be set when creating new route
[  135.910556][ T5839] hid-generic 0362:07FF:7FFFFFFF.0003: probe with driver hid-generic failed with error -22
[  135.911267][ T8860] program syz.4.910 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  136.109463][   T42] kauditd_printk_skb: 15 callbacks suppressed
[  136.109487][   T42] audit: type=1400 audit(1785936269.911:691): avc:  denied  { mount } for  pid=8876 comm="syz.1.915" name="/" dev="pstore" ino=5847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[  136.252598][ T8888] overlayfs: failed to resolve './cgroup': -2
[  136.261284][ T8888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.918'.
[  136.265126][ T8888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.918'.
[  136.325280][ T8894] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11
[  136.379867][ T8902] netlink: 'syz.4.923': attribute type 49 has an invalid length.
[  136.393622][   T42] audit: type=1400 audit(1785936270.191:692): avc:  denied  { write } for  pid=8904 comm="syz.0.924" name="subsystems" dev="configfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  136.405830][   T42] audit: type=1400 audit(1785936270.211:693): avc:  denied  { write } for  pid=8904 comm="syz.0.924" name="namespaces" dev="configfs" ino=38711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  136.405904][ T8905] nvmet: adding nsid 1 to subsystem testnqn
[  136.420806][ T8902] bond0: (slave bond_slave_0): Releasing backup interface
[  136.432294][   T42] audit: type=1800 audit(1785936270.241:694): pid=8905 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.924" name="buffered_io" dev="configfs" ino=38714 res=0 errno=0
[  136.520831][ T8902] bond_slave_0: entered promiscuous mode
[  136.524786][ T8902] bond_slave_0: entered allmulticast mode
[  136.529384][ T8901] pci_bus 0000:01: busn_res: [bus 01] is released
[  136.634732][ T8906] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port
[  136.645497][ T8906] pci 0000:00:04.0: PCI bridge to [bus 01]
[  136.650863][ T8906] pci 0000:00:04.0:   bridge window [io  0x1000-0x1fff]
[  136.656996][ T8906] pci 0000:00:04.0:   bridge window [mem 0xfe800000-0xfe9fffff]
[  136.663790][ T8906] pci 0000:00:04.0:   bridge window [mem 0x380000000000-0x3807ffffffff 64bit pref]
[  136.667656][ T8906] pci 0000:00:04.0: enabling Extended Tags
[  136.693814][ T8906] pci 0000:00:04.0: Adding to iommu group 4
[  136.726387][ T8906] pci 0000:00:04.0: PCI bridge to [bus 01]
[  136.732948][ T8906] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000
[  136.739341][ T8906] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000
[  136.743806][ T8906] pci 0000:00:04.0: bridge window [mem 0x80900000-0x80afffff]: assigned
[  136.746488][ T8906] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3800001fffff 64bit pref]: assigned
[  136.749878][ T8906] pci 0000:00:04.0: bridge window [io  0x1000-0x1fff]: assigned
[  136.753577][ T8906] pci 0000:00:04.0: PCI bridge to [bus 01]
[  136.755564][ T8906] pci 0000:00:04.0:   bridge window [io  0x1000-0x1fff]
[  136.763007][ T8906] pci 0000:00:04.0:   bridge window [mem 0x80900000-0x80afffff]
[  136.767217][ T8906] pci 0000:00:04.0:   bridge window [mem 0x380000000000-0x3800001fffff 64bit pref]
[  136.820748][   T42] audit: type=1400 audit(1785936270.621:695): avc:  denied  { write } for  pid=8933 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  136.847535][ T8906] pcieport 0000:00:04.0: PME: Signaling with IRQ 25
[  136.861302][ T8939] overlayfs: failed to resolve './file0': -2
[  136.864087][ T8906] pcieport 0000:00:04.0: AER: enabled with IRQ 26
[  136.888587][   T42] audit: type=1400 audit(1785936270.691:696): avc:  denied  { write } for  pid=8940 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  137.585012][   T42] audit: type=1400 audit(1785936271.391:697): avc:  denied  { read write } for  pid=8975 comm="syz.0.942" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  137.605229][   T42] audit: type=1400 audit(1785936271.391:698): avc:  denied  { open } for  pid=8975 comm="syz.0.942" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  137.621130][ T8976] __nla_validate_parse: 5 callbacks suppressed
[  137.621143][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.942'.
[  137.626628][ T8981] netlink: 36 bytes leftover after parsing attributes in process `syz.3.939'.
[  137.709328][ T8988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8988 comm=syz.0.946
[  137.729486][ T8988] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  137.732804][ T8988] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  137.739482][   T42] audit: type=1400 audit(1785936271.541:699): avc:  denied  { firmware_load } for  pid=8987 comm="syz.0.946" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  137.739887][ T8988] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  137.880920][ T5809] IPVS: starting estimator thread 0...
[  137.981879][ T8996] IPVS: using max 45 ests per chain, 108000 per kthread
[  138.570038][ T9033] MTD: Attempt to mount non-MTD device "/dev/sr0"
[  138.571326][   T42] audit: type=1400 audit(1785936272.371:700): avc:  denied  { connect } for  pid=9025 comm="syz.4.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  138.579698][ T9036] netlink: 59 bytes leftover after parsing attributes in process `syz.3.961'.
[  138.585836][ T9033] romfs: unable to set blocksize
[  138.585836][ T9033] 
[  138.617316][ T9033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.962'.
[  138.645730][ T9033] 8021q: adding VLAN 0 to HW filter on device bond1
[  138.663840][ T9036] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  139.173301][ T9079] netlink: 'syz.0.974': attribute type 9 has an invalid length.
[  139.179163][ T9080] netlink: 'syz.0.974': attribute type 9 has an invalid length.
[  139.731227][ T9109] vlan2: entered allmulticast mode
[  139.733616][ T9109] macsec0: entered allmulticast mode
[  139.735965][ T9109] veth1_macvtap: entered allmulticast mode
[  139.810047][ T9118] random: crng reseeded on system resumption
[  140.340088][ T9155] program syz.0.995 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  140.436807][ T9165] gfs2: not a GFS2 filesystem
[  140.438792][ T9158] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.444912][ T9158] 8021q: adding VLAN 0 to HW filter on device team0
[  140.455200][ T9158] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.503897][ T9158] 8021q: adding VLAN 0 to HW filter on device bond1
[  140.524770][ T9164] netlink: 56 bytes leftover after parsing attributes in process `syz.0.998'.
[  140.553616][ T9160] MPI: mpi too large (16392 bits)
[  140.582254][ T5789] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  140.602801][ T5817] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  140.607660][ T5817] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  140.610700][ T5817] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  140.689351][ T9170] efs: cannot read volume header
[  140.907752][ T9194] overlay: ./file1 is not a directory
[  141.109799][ T9209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1012'.
[  141.147261][ T9207] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1011'.
[  141.176168][ T9207] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  141.182164][ T9221] xt_NFQUEUE: number of queues (5) out of range (got 65536)
[  141.189631][ T9219] overlayfs: upper fs does not support file handles, falling back to index=off.
[  141.189673][ T9219] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  141.431179][   T42] kauditd_printk_skb: 20 callbacks suppressed
[  141.431212][   T42] audit: type=1400 audit(1785936275.231:721): avc:  denied  { create } for  pid=9242 comm="syz.4.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  141.442892][   T42] audit: type=1400 audit(1785936275.231:722): avc:  denied  { setopt } for  pid=9242 comm="syz.4.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  141.463290][   T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  141.522574][   T42] audit: type=1400 audit(1785936275.331:723): avc:  denied  { create } for  pid=9242 comm="syz.4.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  141.576642][ T9253] fuse: Unknown parameter 'f¤'
[  141.615232][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[  141.623267][   T10] usb 6-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  141.634449][   T10] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  141.638383][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.646751][   T10] usb 6-1: Product: syz
[  141.648679][   T10] usb 6-1: Manufacturer: syz
[  141.650715][   T42] audit: type=1400 audit(1785936275.451:724): avc:  denied  { read } for  pid=9255 comm="syz.0.1026" name="buffer_subbuf_size_kb" dev="tracefs" ino=5570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  141.663542][   T42] audit: type=1400 audit(1785936275.451:725): avc:  denied  { write } for  pid=9255 comm="syz.0.1026" name="usb_gadget" dev="configfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  141.664396][   T10] usb 6-1: SerialNumber: syz
[  141.670663][   T42] audit: type=1400 audit(1785936275.451:726): avc:  denied  { write } for  pid=9255 comm="syz.0.1026" name="functions" dev="configfs" ino=44474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  141.702084][   T42] audit: type=1400 audit(1785936275.471:727): avc:  denied  { getattr } for  pid=9255 comm="syz.0.1026" path="/284/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=44482 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  141.711515][   T42] audit: type=1400 audit(1785936275.471:728): avc:  denied  { ioctl } for  pid=9255 comm="syz.0.1026" path="/284/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=44483 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  141.923646][   T10] usb 6-1: 1:1: cannot set freq 48000 to ep 0x1
[  141.955859][   T10] usb 6-1: USB disconnect, device number 16
[  142.018882][   T42] audit: type=1400 audit(1785936275.821:729): avc:  denied  { read append } for  pid=9281 comm="syz.4.1033" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  142.022695][ T9282] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  142.029866][   T42] audit: type=1400 audit(1785936275.821:730): avc:  denied  { open } for  pid=9281 comm="syz.4.1033" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  142.035407][ T9282] iommufd_mock iommufd_mock1: Adding to iommu group 10
[  142.083673][ T9288] udevd[9288]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  142.220988][ T9275] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint
[  142.236401][ T9275] pci 0000:00:01.0: BAR 0 [mem 0x00000000-0x007fffff pref]
[  142.239643][ T9275] pci 0000:00:01.0: BAR 2 [mem 0x00080000-0x00083fff 64bit pref]
[  142.243238][ T9275] pci 0000:00:01.0: BAR 4 [mem 0x2cc00000-0x2cc00fff]
[  142.246009][ T9275] pci 0000:00:01.0: ROM [mem 0x63700000-0x6370ffff pref]
[  142.266955][ T9275] pci 0000:00:01.0: Adding to iommu group 1
[  142.283810][ T9275] pci 0000:00:01.0: vgaarb: bridge control possible
[  142.286704][ T9275] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=none,locks=none
[  142.302802][ T9275] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned
[  142.306487][ T9275] pci 0000:00:01.0: ROM [mem 0x80810000-0x8081ffff pref]: assigned
[  142.309903][ T9275] pci 0000:00:01.0: BAR 2 [mem 0x380000200000-0x380000203fff 64bit pref]: assigned
[  142.314908][ T9275] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned
[  142.327203][ T9275] virtio-pci 0000:00:01.0: enabling device (0000 -> 0002)
[  142.410801][ T9275] [drm] pci: virtio-vga detected at 0000:00:01.0
[  142.415057][ T9275] [drm] features: -virgl +edid -resource_blob -host_visible
[  142.415077][ T9275] [drm] features: -context_init -blob_alignment
[  142.438708][ T9275] [drm] number of scanouts: 1
[  142.447938][ T9275] [drm] number of cap sets: 0
[  142.499292][ T9275] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 2
[  142.505200][ T9325] netlink: 'syz.4.1045': attribute type 9 has an invalid length.
[  142.515130][ T9325] x_tables: duplicate underflow at hook 1
[  142.579215][ T9331] netlink: 'syz.1.1047': attribute type 1 has an invalid length.
[  142.596609][ T9275] virtio-pci 0000:00:01.0: [drm] fb1: virtio_gpudrmfb frame buffer device
[  142.634811][ T9337] jffs2: notice: (9337) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  142.640800][ T9331] bond2: option mode: invalid value (8)
[  142.656649][ T9331] bond2 (unregistering): Released all slaves
[  142.706184][ T9332] netlink: 'syz.1.1047': attribute type 10 has an invalid length.
[  142.708844][ T9344] netlink: 'syz.1.1047': attribute type 10 has an invalid length.
[  142.713710][ T9332] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1047'.
[  142.718593][ T9344] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1047'.
[  142.723058][ T9332] dummy0: entered promiscuous mode
[  142.855800][ T9348] kvm: pic: non byte write
[  143.070656][ T9364] team0: Port device vlan2 added

syzkaller
syzkaller login: [  143.401850][   T24] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  143.561872][   T24] usb 8-1: Using ep0 maxpacket: 8
[  143.564799][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  143.568273][   T24] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  143.571111][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.575750][   T24] usb 8-1: config 0 descriptor??
[  143.647367][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1062'.
[  143.784439][   T24] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  144.006354][   T24] usb 8-1: USB disconnect, device number 6
[  144.103081][ T9418] netlink: 'syz.4.1068': attribute type 101 has an invalid length.
[  144.108022][ T9418] netlink: 'syz.4.1068': attribute type 1 has an invalid length.
[  144.124931][    C2] vcan0: j1939_tp_rxtimer: 0xffff888034c71800: rx timeout, send abort
[  144.132923][    C2] vcan0: j1939_xtp_rx_abort_one: 0xffff888034c71800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  144.176275][ T9422] xt_hashlimit: size too large, truncated to 1048576
[  144.186421][ T9422] xt_hashlimit: invalid interval
[  144.602562][ T9454] fuse: Bad value for 'user_id'
[  144.604200][ T9454] fuse: Bad value for 'user_id'
[  144.776666][ T9462] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1081'.
[  145.366006][ T9498] ./sys/bus/nd/drivers/nd_pmem/unbind: Can't lookup blockdev
[  145.391857][   T34] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  145.561823][   T34] usb 9-1: Using ep0 maxpacket: 32
[  145.568020][   T34] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 172, changing to 7
[  145.574601][   T34] usb 9-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[  145.577661][   T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.582582][   T34] usb 9-1: Product: syz
[  145.584002][   T34] usb 9-1: Manufacturer: syz
[  145.588825][   T34] usb 9-1: SerialNumber: syz
[  145.812492][   T34] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  145.838749][ T9518] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  145.846797][ T9518] netlink: 'syz.0.1093': attribute type 3 has an invalid length.
[  145.941025][ T9521] netlink: 'syz.3.1094': attribute type 4 has an invalid length.
[  146.012234][   T34] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  146.043303][   T34] usb 9-1: USB disconnect, device number 3
[  146.072685][ T6404] udevd[6404]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  146.671576][ T9518] orangefs_mount: mount request failed with -4
[  147.297631][   T42] kauditd_printk_skb: 43 callbacks suppressed
[  147.297668][   T42] audit: type=1400 audit(1785936281.101:774): avc:  denied  { execute } for  pid=9548 comm="syz.4.1101" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  147.535531][   T42] audit: type=1400 audit(1785936281.341:775): avc:  denied  { write } for  pid=9571 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  147.586703][   T42] audit: type=1400 audit(1785936281.391:776): avc:  denied  { write } for  pid=9576 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  148.031892][ T5893] usb 8-1: new full-speed USB device number 7 using dummy_hcd
[  148.142144][   T42] audit: type=1400 audit(1785936281.941:777): avc:  denied  { mounton } for  pid=9591 comm="syz.4.1112" path="/143/file0" dev="tmpfs" ino=777 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  148.216210][ T5893] usb 8-1: unable to get BOS descriptor or descriptor too short
[  148.222202][ T5893] usb 8-1: not running at top speed; connect to a high speed hub
[  148.225805][ T5893] usb 8-1: config 14 has an invalid interface number: 57 but max is 1
[  148.229696][ T5893] usb 8-1: config 14 has an invalid interface number: 228 but max is 1
[  148.233347][ T5893] usb 8-1: config 14 has no interface number 0
[  148.235586][ T5893] usb 8-1: config 14 has no interface number 1
[  148.237565][ T5893] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  148.240922][ T5893] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[  148.247299][ T5893] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  148.251116][ T5893] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64
[  148.255802][ T5893] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10
[  148.259227][ T5893] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[  148.262575][ T5893] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  148.267350][ T5893] usb 8-1: config 14 interface 57 has no altsetting 0
[  148.270174][ T5893] usb 8-1: config 14 interface 228 has no altsetting 0
[  148.276288][ T5893] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  148.279941][ T5893] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.283413][ T5893] usb 8-1: Product: syz
[  148.289445][ T5893] usb 8-1: Manufacturer: syz
[  148.292461][ T5893] usb 8-1: SerialNumber: syz
[  148.409569][   T42] audit: type=1400 audit(1785936282.211:778): avc:  denied  { write } for  pid=9611 comm="syz.0.1119" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  148.420169][   T42] audit: type=1400 audit(1785936282.211:779): avc:  denied  { read } for  pid=9611 comm="syz.0.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  148.430558][   T42] audit: type=1400 audit(1785936282.211:780): avc:  denied  { ioctl } for  pid=9611 comm="syz.0.1119" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x8927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  148.547625][ T9625] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1125'.
[  148.585391][   T42] audit: type=1400 audit(1785936282.381:781): avc:  denied  { write } for  pid=9623 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  148.645791][ T9635] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1125'.
[  148.676943][   T42] audit: type=1400 audit(1785936282.481:782): avc:  denied  { write } for  pid=9636 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  148.717253][ T5893] legousbtower 8-1:14.57: interrupt endpoints not found
[  148.719846][   T42] audit: type=1400 audit(1785936282.521:783): avc:  denied  { write } for  pid=9639 comm="syz.4.1128" name="/" dev="9p" ino=76573371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  149.124039][ T5893] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507
[  149.131351][ T5893] legousbtower 8-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  149.715452][ T9663] usb 8-1: Couldn't submit interrupt_out_urb -90
[  149.953905][    C3] usb 8-1: tower_interrupt_in_callback: usb_submit_urb failed (-1)
[  149.963658][   T10] usb 8-1: USB disconnect, device number 7
[  149.988398][   T10] legousbtower 8-1:14.228: LEGO USB Tower #-160 now disconnected
[  150.424097][ T9727] xt_policy: output policy not valid in PREROUTING and INPUT
[  150.428475][ T9727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1149'.
[  150.432919][ T9727] openvswitch: netlink: Actions may not be safe on all matching packets
[  150.674918][ T9738] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[  150.680812][ T9743] IPv6: NLM_F_CREATE should be specified when creating new route
[  150.686047][ T9743] netlink: 'syz.4.1155': attribute type 1 has an invalid length.
[  151.019317][ T9759] syz.3.1160 (9759): drop_caches: 2
[  151.027615][ T9760] syz.3.1160 (9760): drop_caches: 2
[  151.209535][ T5746] Bluetooth: hci2: unexpected event for opcode 0x2041
[  151.371110][ T9793] tmpfs: Unknown parameter 'u¬ÆWu_&>¦ã
Ïͽ.3Sð]?[œPoB3vot)Wb.¢“x#]'
[  151.408090][ T9797] tmpfs: Bad value for 'mpol'
[  151.852989][   T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  152.018109][   T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  152.022420][   T10] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[  152.025283][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.246878][   T10] qmi_wwan 6-1:1.0: cdc-wdm0: USB WDM device
[  152.265825][   T10] wwan wwan0: port wwan0qmi0 attached
[  152.375309][ T9846] mac80211_hwsim hwsim8 syzkaller1: left promiscuous mode
[  152.378425][ T9846] mac80211_hwsim hwsim8 syzkaller1: left allmulticast mode
[  152.408684][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803a741000: rx timeout, send abort
[  152.445970][   T42] kauditd_printk_skb: 11 callbacks suppressed
[  152.446000][   T42] audit: type=1400 audit(1785936286.251:795): avc:  denied  { read write } for  pid=9812 comm="syz.1.1175" name="cdc-wdm0" dev="devtmpfs" ino=3030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  152.459123][   T42] audit: type=1400 audit(1785936286.251:796): avc:  denied  { open } for  pid=9812 comm="syz.1.1175" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  152.644729][   T42] audit: type=1400 audit(1785936286.451:797): avc:  denied  { write } for  pid=9857 comm="syz.0.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  152.799091][ T9867] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1191'.
[  152.833162][ T9870] binder: 9869:9870 ioctl 400454ca 200000000240 returned -22
[  152.908866][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803a741800: rx timeout, send abort
[  152.911573][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803a741000: abort rx timeout. Force session deactivation
[  152.912704][ T9873] fuse: Unknown parameter '@ü"Ã
'
[  152.950711][ T9876] No source specified
[  153.098471][ T9888] CIFS: bad ip= option (.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ 
£~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð)
[  153.102584][ T9887] CIFS: bad ip= option (.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ 
£~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð)
[  153.242138][ T5839] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  153.289177][ T9898] ALSA: seq fatal error: cannot create timer (-19)
[  153.324367][ T9898] ALSA: seq fatal error: cannot create timer (-19)
[  153.349045][ T9898] ALSA: seq fatal error: cannot create timer (-19)
[  153.378519][ T9898] ALSA: seq fatal error: cannot create timer (-19)
[  153.393625][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  153.398323][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  153.404251][ T5839] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  153.409873][ T5839] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  153.411571][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803a741800: abort rx timeout. Force session deactivation
[  153.413886][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.420512][ T9898] ALSA: seq fatal error: cannot create timer (-19)
[  153.432820][ T5839] usb 5-1: config 0 descriptor??
[  153.453771][ T9898] ALSA: seq fatal error: cannot create timer (-19)
[  153.481154][ T9898] ALSA: seq fatal error: cannot create timer (-19)
[  153.515649][ T9898] ALSA: seq fatal error: cannot create timer (-19)
[  153.539515][ T9898] ALSA: seq fatal error: cannot create timer (-19)
[  153.574683][ T9898] ALSA: seq fatal error: cannot create timer (-19)
[  153.610887][ T9898] ALSA: seq fatal error: cannot create timer (-19)
[  153.655167][ T9898] ALSA: seq fatal error: cannot create timer (-19)
[  153.682593][ T9898] ALSA: seq fatal error: cannot create timer (-19)
[  153.714833][ T9898] ALSA: seq fatal error: cannot create timer (-19)
[  153.748295][ T9898] ALSA: seq fatal error: cannot create timer (-19)
[  153.788911][ T9898] ALSA: seq fatal error: cannot create timer (-19)
[  153.829856][ T9898] ALSA: seq fatal error: cannot create timer (-19)
[  153.857935][ T5839] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  153.860937][ T9898] ALSA: seq fatal error: cannot create timer (-19)
[  153.860944][ T5839] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x5
[  153.867450][ T5839] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  153.870661][ T5839] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  153.873895][ T5839] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  153.877026][ T5839] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  153.880127][ T5839] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  153.880152][ T9898] ALSA: seq fatal error: cannot create timer (-19)
[  153.883309][ T5839] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  153.883333][ T5839] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  153.897070][ T5839] plantronics 0003:047F:FFFF.0004: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  153.918894][ T9898] ALSA: seq fatal error: cannot create timer (-19)
[  153.937755][ T9898] ALSA: seq fatal error: cannot create timer (-19)
[  153.958616][ T9898] ALSA: seq fatal error: cannot create timer (-19)
[  153.978304][ T9898] ALSA: seq fatal error: cannot create timer (-19)
[  154.003478][ T9898] ALSA: seq fatal error: cannot create timer (-19)
[  154.021367][ T9898] ALSA: seq fatal error: cannot create timer (-19)
[  154.044878][ T9898] ALSA: seq fatal error: cannot create timer (-19)
[  154.064910][ T9898] ALSA: seq fatal error: cannot create timer (-19)
[  154.079019][ T9898] ALSA: seq fatal error: cannot create timer (-19)
[  154.611789][ T9953] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1209'.
[  154.620583][ T9953] mmap: syz.3.1209 (9953) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  154.749278][   T10] qmi_wwan 6-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, 56:d4:d5:2c:29:cf
[  154.757597][   T10] usb 6-1: USB disconnect, device number 17
[  154.775503][   T10] qmi_wwan 6-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device
[  154.850920][   T42] audit: type=1400 audit(1785936288.651:798): avc:  denied  { write } for  pid=9963 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  154.867057][   T10] wwan wwan0: port wwan0qmi0 disconnected
[  154.898147][   T42] audit: type=1400 audit(1785936288.701:799): avc:  denied  { write } for  pid=9970 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  154.965112][   T42] audit: type=1400 audit(1785936288.771:800): avc:  denied  { write } for  pid=9973 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  155.015875][   T42] audit: type=1400 audit(1785936288.821:801): avc:  denied  { write } for  pid=9976 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  155.056767][ T9979] binder: Bad value for 'max'
[  155.270193][ T9984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=9984 comm=syz.3.1217
[  155.308753][   T42] audit: type=1400 audit(1785936289.111:802): avc:  denied  { write } for  pid=9985 comm="syz.3.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  155.383632][ T9987] fuse: Unknown parameter 'ÿ0x0000000000000003'
[  155.395211][ T9987] syzkaller0: entered promiscuous mode
[  155.397054][ T9987] syzkaller0: entered allmulticast mode
[  155.806087][ T5746] Bluetooth: hci2: unexpected event for opcode 0x0402
[  155.864943][ T9990] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1219'.
[  155.911342][  T848] usb 5-1: USB disconnect, device number 9
[  155.919110][ T9992] netlink: 'syz.3.1220': attribute type 1 has an invalid length.
[  155.922418][ T9992] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  155.925298][ T9992] IPv6: NLM_F_CREATE should be set when creating new route
[  155.939489][ T9992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=9992 comm=syz.3.1220
[  155.946033][ T9992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=9992 comm=syz.3.1220
[  155.953101][ T9992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2593 sclass=netlink_route_socket pid=9992 comm=syz.3.1220
[  156.199410][   T42] audit: type=1400 audit(1785936290.001:803): avc:  denied  { ioctl } for  pid=10005 comm="syz.0.1226" path="socket:[48932]" dev="sockfs" ino=48932 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  156.308024][T10010] program syz.0.1227 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  156.794796][T10050] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1234'.
[  156.800713][T10050] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1234'.
[  156.810668][T10050] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22)
[  156.819120][T10050] tmpfs: Bad value for 'mpol'
[  157.098821][   T42] audit: type=1400 audit(1785936290.901:804): avc:  denied  { write } for  pid=10060 comm="syz.0.1238" name="functions" dev="configfs" ino=44474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  158.478131][T10097] netlink: 'syz.0.1248': attribute type 1 has an invalid length.
[  158.506177][T10097] 8021q: adding VLAN 0 to HW filter on device bond1
[  158.514840][T10100] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1249'.
[  158.529409][T10097] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  158.552678][T10097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10097 comm=syz.0.1248
[  158.571806][T10102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1250'.
[  158.575457][T10102] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1250'.
[  158.578826][T10102] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1250'.
[  158.861915][  T848] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  159.023657][  T848] usb 5-1: config 1 has an invalid interface number: 7 but max is 0
[  159.027200][  T848] usb 5-1: config 1 has no interface number 0
[  159.029594][  T848] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  159.034460][  T848] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  159.040143][  T848] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  159.044008][  T848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.047509][  T848] usb 5-1: Product: syz
[  159.049249][  T848] usb 5-1: Manufacturer: syz
[  159.051101][  T848] usb 5-1: SerialNumber: syz
[  159.060321][T10104] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  159.268856][T10104] binder_alloc: 10103: pid 10103 spamming oneway? 1 buffers allocated for a total size of 4096
[  159.384801][T10128] overlayfs: failed to resolve './cgroup': -2
[  159.389009][T10128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1258'.
[  159.392193][T10128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1258'.
[  159.475071][T10104] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  159.693504][  T848] usb 5-1: Incompatible driver and firmware versions
[  159.703970][  T848] usb 5-1: USB disconnect, device number 10
[  159.778249][T10136] dvmrp0: left allmulticast mode
[  159.779889][T10136] pimreg: left allmulticast mode
[  159.829658][T10137] lo: entered allmulticast mode
[  159.864126][T10136] lo: left allmulticast mode
[  159.905804][   T42] kauditd_printk_skb: 2 callbacks suppressed
[  159.905829][   T42] audit: type=1400 audit(1785936293.711:807): avc:  denied  { write } for  pid=10140 comm="syz.3.1262" name="/" dev="9p" ino=76573371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  160.397519][   T42] audit: type=1400 audit(1785936294.201:808): avc:  denied  { bind } for  pid=10153 comm="syz.0.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  160.405524][   T42] audit: type=1400 audit(1785936294.211:809): avc:  denied  { listen } for  pid=10153 comm="syz.0.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  160.416380][   T42] audit: type=1400 audit(1785936294.211:810): avc:  denied  { connect } for  pid=10153 comm="syz.0.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  161.170344][T10173] overlayfs: failed to resolve './cgroup': -2
[  161.174269][T10173] __nla_validate_parse: 1 callbacks suppressed
[  161.174287][T10173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1271'.
[  161.179126][T10173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1271'.
[  161.182286][T10173] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1271'.
[  161.256098][T10177] No source specified
[  161.914729][T10197] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1279'.
[  162.082203][T10197] i2c i2c-0: new_device: Instantiated device wcd9390-usbss at 0x04
[  162.158070][T10206] overlayfs: failed to resolve './cgroup': -2
[  162.162837][T10206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1282'.
[  162.166688][T10206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1282'.
[  162.171246][T10206] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1282'.
[  162.451538][   T42] audit: type=1400 audit(1785936296.251:811): avc:  denied  { read } for  pid=10219 comm="syz.4.1286" name="/" dev="configfs" ino=3112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  162.461534][   T42] audit: type=1400 audit(1785936296.251:812): avc:  denied  { read open } for  pid=10219 comm="syz.4.1286" path="/" dev="configfs" ino=3112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  162.913564][   T42] audit: type=1400 audit(1785936296.721:813): avc:  denied  { append } for  pid=10227 comm="syz.3.1290" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  162.924321][   T42] audit: type=1400 audit(1785936296.721:814): avc:  denied  { map } for  pid=10227 comm="syz.3.1290" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  162.934711][   T42] audit: type=1400 audit(1785936296.721:815): avc:  denied  { write execute } for  pid=10227 comm="syz.3.1290" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  163.059411][T10235] overlayfs: failed to resolve './cgroup': -2
[  163.065844][T10235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1291'.
[  163.068664][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1291'.
[  163.071427][T10235] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1291'.
[  163.161186][T10218] FAULT_INJECTION: forcing a failure.
[  163.161186][T10218] name fail_futex, interval 1, probability 0, space 0, times 1
[  163.166921][T10218] CPU: 0 UID: 0 PID: 10218 Comm: syz.0.1284 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  163.166949][T10218] Tainted: [L]=SOFTLOCKUP
[  163.166955][T10218] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  163.166980][T10218] Call Trace:
[  163.166999][T10218]  <TASK>
[  163.167007][T10218]  dump_stack_lvl+0x100/0x190
[  163.167153][T10218]  should_fail_ex.cold+0x5/0xa
[  163.167203][T10218]  get_futex_key+0x1d2/0x14f0
[  163.167260][T10218]  ? __pfx_get_futex_key+0x10/0x10
[  163.167286][T10218]  ? lock_acquire+0x1b9/0x370
[  163.167409][T10218]  futex_wake+0xf4/0x5e0
[  163.167433][T10218]  ? __pfx_futex_wake+0x10/0x10
[  163.167454][T10218]  ? find_held_lock+0x2b/0x80
[  163.167473][T10218]  ? exit_mm_release+0x19/0x30
[  163.167516][T10218]  do_futex+0x2b2/0x440
[  163.167565][T10218]  ? __pfx_do_futex+0x10/0x10
[  163.167590][T10218]  ? __might_fault+0xc5/0x140
[  163.167633][T10218]  mm_release+0x24a/0x2f0
[  163.167657][T10218]  do_exit+0x707/0x2ae0
[  163.167685][T10218]  ? lockdep_hardirqs_on+0x78/0x100
[  163.167741][T10218]  ? tcp_recvmsg+0x14c/0x630
[  163.167780][T10218]  ? __pfx_do_exit+0x10/0x10
[  163.167807][T10218]  ? do_raw_spin_lock+0x128/0x260
[  163.167832][T10218]  ? find_held_lock+0x2b/0x80
[  163.167849][T10218]  ? get_signal+0x7e0/0x21e0
[  163.167878][T10218]  do_group_exit+0xd5/0x2a0
[  163.167898][T10218]  get_signal+0x1ec7/0x21e0
[  163.167934][T10218]  ? __pfx_tcp_recvmsg+0x10/0x10
[  163.167959][T10218]  ? inet_recvmsg+0xdc/0x4c0
[  163.167992][T10218]  ? rcu_is_watching+0x12/0xc0
[  163.168033][T10218]  ? __pfx_get_signal+0x10/0x10
[  163.168057][T10218]  ? __pfx___sys_recvfrom+0x10/0x10
[  163.168093][T10218]  arch_do_signal_or_restart+0x91/0x7e0
[  163.168125][T10218]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  163.168157][T10218]  exit_to_user_mode_loop+0x139/0x6f0
[  163.168187][T10218]  ? rcu_is_watching+0x12/0xc0
[  163.168207][T10218]  do_syscall_64+0x666/0x870
[  163.168221][T10218]  ? clear_bhb_loop+0x40/0x90
[  163.168235][T10218]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.168247][T10218] RIP: 0033:0x7f678f59e0d9
[  163.168257][T10218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.168268][T10218] RSP: 002b:00007f678d7b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d
[  163.168286][T10218] RAX: fffffffffffffe00 RBX: 00007f678f826180 RCX: 00007f678f59e0d9
[  163.168293][T10218] RDX: fffffffffffffd0b RSI: 0000200000000080 RDI: 0000000000000005
[  163.168299][T10218] RBP: 00007f678d7b4090 R08: 0000000000000000 R09: fffffffffffffd25
[  163.168305][T10218] R10: 0000000000000720 R11: 0000000000000246 R12: 0000000000000001
[  163.168311][T10218] R13: 00007f678f826218 R14: 00007f678f826180 R15: 00007ffde0ae0b28
[  163.168325][T10218]  </TASK>
[  163.766432][T10262] overlayfs: failed to resolve './cgroup': -2
[  164.502389][T10293] overlayfs: failed to resolve './cgroup': -2
[  164.561088][   T42] audit: type=1400 audit(1785936298.361:816): avc:  denied  { setattr } for  pid=10295 comm="syz.4.1311" name="[userfaultfd]" dev="anon_inodefs" ino=56895 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  165.177872][T10331] netlink: 'syz.3.1323': attribute type 3 has an invalid length.
[  165.179738][T10322] input: syz0 as /devices/virtual/input/input15
[  165.184994][T10328] overlayfs: failed to resolve './cgroup': -2
[  165.264853][   T42] kauditd_printk_skb: 1 callbacks suppressed
[  165.264871][   T42] audit: type=1400 audit(1785936299.071:818): avc:  denied  { write } for  pid=10332 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.346386][   T42] audit: type=1400 audit(1785936299.151:819): avc:  denied  { write } for  pid=10338 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.498270][   T42] audit: type=1400 audit(1785936299.301:820): avc:  denied  { write } for  pid=10342 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.578812][   T42] audit: type=1400 audit(1785936299.381:821): avc:  denied  { write } for  pid=10350 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.667005][   T42] audit: type=1400 audit(1785936299.471:822): avc:  denied  { write } for  pid=10356 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.722384][   T42] audit: type=1400 audit(1785936299.531:823): avc:  denied  { write } for  pid=10360 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.828840][   T42] audit: type=1400 audit(1785936299.631:824): avc:  denied  { write } for  pid=10364 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.879165][   T42] audit: type=1400 audit(1785936299.681:825): avc:  denied  { write } for  pid=10369 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.969526][   T42] audit: type=1400 audit(1785936299.771:826): avc:  denied  { write } for  pid=10371 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  166.045264][   T42] audit: type=1400 audit(1785936299.851:827): avc:  denied  { write } for  pid=10377 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  166.220852][T10390] overlayfs: failed to resolve './cgroup': -2
[  166.228655][T10390] __nla_validate_parse: 9 callbacks suppressed
[  166.228681][T10390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1332'.
[  166.236266][T10390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1332'.
[  166.240135][T10390] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1332'.
[  166.676726][T10414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47464 sclass=netlink_route_socket pid=10414 comm=syz.4.1340
[  167.051972][T10426] overlayfs: failed to resolve './cgroup': -2
[  167.062752][T10426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1345'.
[  167.066681][T10426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1345'.
[  167.071276][T10426] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1345'.
[  167.321902][  T848] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  167.321965][ T5746] Bluetooth: hci1: command 0x0c1a tx timeout
[  167.329051][  T848] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[  168.289256][T10467] overlayfs: failed to resolve './cgroup': -2
[  168.295662][T10467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1358'.
[  168.299252][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1358'.
[  168.304531][T10467] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1358'.
[  168.939827][T10482] CIFS mount error: No usable UNC path provided in device string!
[  168.939827][T10482] 
[  168.945953][T10482] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  169.402529][ T5746] Bluetooth: hci2: command 0x0405 tx timeout
[  169.406591][  T848] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  169.419677][  T848] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[  169.597270][T10503] overlayfs: workdir and upperdir must reside under the same mount
[  169.610266][T10503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1370'.
[  170.263391][T10540] overlayfs: workdir and upperdir must reside under the same mount
[  170.274919][   T42] kauditd_printk_skb: 8 callbacks suppressed
[  170.274942][   T42] audit: type=1400 audit(1785936304.081:836): avc:  denied  { ioctl } for  pid=10541 comm="syz.4.1382" path="socket:[58925]" dev="sockfs" ino=58925 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  170.701368][T10558] syzkaller0: entered promiscuous mode
[  170.708513][T10558] syzkaller0: entered allmulticast mode
[  170.831245][T10566] overlayfs: failed to resolve './cgroup': -2
[  170.847757][   T42] audit: type=1400 audit(1785936304.651:837): avc:  denied  { write } for  pid=10565 comm="syz.0.1391" name="bus" dev="9p" ino=76573453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  170.856991][   T42] audit: type=1800 audit(1785936304.651:838): pid=10566 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1391" name="file0" dev="9p" ino=76573455 res=0 errno=0
[  171.053227][ T9393] ==================================================================
[  171.056302][ T9393] BUG: KASAN: use-after-free in release_card_device+0x17d/0x1a0
[  171.059223][ T9393] Read of size 1 at addr ffff888034c80909 by task syz.1.1061/9393
[  171.062620][ T9393] 
[  171.064383][ T9393] CPU: 1 UID: 0 PID: 9393 Comm: syz.1.1061 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  171.064408][ T9393] Tainted: [L]=SOFTLOCKUP
[  171.064416][ T9393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  171.064439][ T9393] Call Trace:
[  171.064455][ T9393]  <TASK>
[  171.064463][ T9393]  dump_stack_lvl+0x100/0x190
[  171.064531][ T9393]  print_report+0x13d/0x4b0
[  171.064573][ T9393]  ? __virt_addr_valid+0x239/0x430
[  171.064620][ T9393]  ? release_card_device+0x17d/0x1a0
[  171.064635][ T9393]  kasan_report+0xdf/0x1c0
[  171.064670][ T9393]  ? release_card_device+0x17d/0x1a0
[  171.064687][ T9393]  release_card_device+0x17d/0x1a0
[  171.064702][ T9393]  ? __pfx_release_card_device+0x10/0x10
[  171.064716][ T9393]  device_release+0xd2/0x270
[  171.064804][ T9393]  kobject_put+0x1f7/0x640
[  171.064841][ T9393]  put_device+0x1f/0x30
[  171.064856][ T9393]  snd_card_file_remove+0x38f/0x560
[  171.064875][ T9393]  snd_pcm_oss_release+0x217/0x300
[  171.064893][ T9393]  ? __pfx_snd_disconnect_release+0x10/0x10
[  171.064904][ T9393]  __fput+0x3ff/0xb50
[  171.064931][ T9393]  task_work_run+0x150/0x240
[  171.064956][ T9393]  ? __pfx_task_work_run+0x10/0x10
[  171.064976][ T9393]  do_exit+0x951/0x2ae0
[  171.065012][ T9393]  ? common_nsleep+0xa1/0xd0
[  171.065046][ T9393]  ? __pfx_do_exit+0x10/0x10
[  171.065073][ T9393]  __x64_sys_exit+0x42/0x50
[  171.065086][ T9393]  x64_sys_call+0x152e/0x1530
[  171.065112][ T9393]  do_syscall_64+0x115/0x870
[  171.065142][ T9393]  ? clear_bhb_loop+0x40/0x90
[  171.065160][ T9393]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.065186][ T9393] RIP: 0033:0x7f479ef9e0d9
[  171.065199][ T9393] Code: Unable to access opcode bytes at 0x7f479ef9e0af.
[  171.065215][ T9393] RSP: 002b:00007f479feddfd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[  171.065229][ T9393] RAX: ffffffffffffffda RBX: 00007f479f226090 RCX: 00007f479ef9e0d9
[  171.065240][ T9393] RDX: 00007f479fede9c8 RSI: 0000000000000000 RDI: 0000000000000000
[  171.065250][ T9393] RBP: 00007f479f035024 R08: 0000000000000000 R09: 0000000000000000
[  171.065261][ T9393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  171.065269][ T9393] R13: 00007f479f226128 R14: 00007f479f226090 R15: 00007ffdc5527d48
[  171.065287][ T9393]  </TASK>
[  171.065292][ T9393] 
[  171.154551][ T9393] The buggy address belongs to the physical page:
[  171.157260][ T9393] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34c80
[  171.160711][ T9393] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  171.163535][ T9393] raw: 00fff00000000000 ffffea00015e0008 ffff88806a441500 0000000000000000
[  171.167005][ T9393] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  171.170428][ T9393] page dumped because: kasan: bad access detected
[  171.172988][ T9393] page_owner tracks the page as freed
[  171.175125][ T9393] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 17657869862, free_ts 171052011533
[  171.181859][ T9393]  post_alloc_hook+0xfd/0x120
[  171.183852][ T9393]  get_page_from_freelist+0xf48/0x3530
[  171.186028][ T9393]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  171.188384][ T9393]  alloc_pages_mpol+0x1fb/0x540
[  171.190341][ T9393]  ___kmalloc_large_node+0xe5/0x120
[  171.192430][ T9393]  __kmalloc_large_node_noprof+0x1c/0x70
[  171.194699][ T9393]  __kmalloc_node_track_caller_noprof+0x5ac/0x830
[  171.197257][ T9393]  __devres_alloc_node+0x6e/0x1e0
[  171.199370][ T9393]  snd_devm_card_new+0x9d/0x190
[  171.201389][ T9393]  loopback_probe+0x140/0x11a0
[  171.203330][ T9393]  platform_probe+0x106/0x1d0
[  171.205237][ T9393]  really_probe+0x241/0xa60
[  171.207067][ T9393]  __driver_probe_device+0x20e/0x450
[  171.209165][ T9393]  driver_probe_device+0x4a/0x140
[  171.211221][ T9393]  __device_attach_driver+0x1df/0x320
[  171.213340][ T9393]  bus_for_each_drv+0x159/0x1e0
[  171.215271][ T9393] page last free pid 10572 tgid 10571 stack trace:
[  171.217878][ T9393]  __free_frozen_pages+0x79f/0x1090
[  171.219937][ T9393]  release_nodes+0xc3/0x120
[  171.221762][ T9393]  devres_release_all+0x112/0x180
[  171.223777][ T9393]  device_unbind_cleanup+0x81/0x270
[  171.225879][ T9393]  device_release_driver_internal+0x4c4/0x620
[  171.228323][ T9393]  unbind_store+0xf8/0x110
[  171.230139][ T9393]  drv_attr_store+0x74/0xb0
[  171.231947][ T9393]  sysfs_kf_write+0xf2/0x150
[  171.233799][ T9393]  kernfs_fop_write_iter+0x3e0/0x5f0
[  171.235926][ T9393]  vfs_write+0x6ac/0x1050
[  171.237750][ T9393]  ksys_write+0x12a/0x250
[  171.239592][ T9393]  do_syscall_64+0x115/0x870
[  171.241462][ T9393]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.243885][ T9393] 
[  171.244888][ T9393] Memory state around the buggy address:
[  171.247124][ T9393]  ffff888034c80800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  171.250229][ T9393]  ffff888034c80880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  171.253394][ T9393] >ffff888034c80900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  171.256597][ T9393]                       ^
[  171.258340][ T9393]  ffff888034c80980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  171.261506][ T9393]  ffff888034c80a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  171.264667][ T9393] ==================================================================
[  171.270629][ T9393] Kernel panic - not syncing: KASAN: panic_on_warn set ...
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  171.272924][ T9393] CPU: 2 UID: 0 PID: 9393 Comm: syz.1.1061 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  171.277339][ T9393] Tainted: [L]=SOFTLOCKUP
[  171.278961][ T9393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  171.282305][ T9393] Call Trace:
[  171.283632][ T9393]  <TASK>
[  171.284804][ T9393]  dump_stack_lvl+0x100/0x190
[  171.286736][ T9393]  vpanic+0x552/0x970
[  171.288365][ T9393]  ? __pfx_vpanic+0x10/0x10
[  171.289928][ T9393]  ? irqentry_exit+0x24d/0xa00
[  171.291542][ T9393]  ? release_card_device+0x17d/0x1a0
[  171.293595][ T9393]  panic+0xd1/0xe0
[  171.295068][ T9393]  ? __pfx_panic+0x10/0x10
[  171.296754][ T9393]  ? check_panic_on_warn+0x1f/0x90
[  171.298397][ T9393]  ? check_panic_on_warn+0x1f/0x90
[  171.300285][ T9393]  check_panic_on_warn.cold+0x19/0x34
[  171.302360][ T9393]  end_report.part.0+0x3a/0x90
[  171.304251][ T9393]  kasan_report.cold+0xe/0x18
[  171.305838][ T9393]  ? release_card_device+0x17d/0x1a0
[  171.307710][ T9393]  release_card_device+0x17d/0x1a0
[  171.309282][ T9393]  ? __pfx_release_card_device+0x10/0x10
[  171.311010][ T9393]  device_release+0xd2/0x270
[  171.312474][ T9393]  kobject_put+0x1f7/0x640
[  171.313888][ T9393]  put_device+0x1f/0x30
[  171.315184][ T9393]  snd_card_file_remove+0x38f/0x560
[  171.316816][ T9393]  snd_pcm_oss_release+0x217/0x300
[  171.318388][ T9393]  ? __pfx_snd_disconnect_release+0x10/0x10
[  171.320213][ T9393]  __fput+0x3ff/0xb50
[  171.321459][ T9393]  task_work_run+0x150/0x240
[  171.322878][ T9393]  ? __pfx_task_work_run+0x10/0x10
[  171.324441][ T9393]  do_exit+0x951/0x2ae0
[  171.325754][ T9393]  ? common_nsleep+0xa1/0xd0
[  171.327187][ T9393]  ? __pfx_do_exit+0x10/0x10
[  171.328584][ T9393]  __x64_sys_exit+0x42/0x50
[  171.329966][ T9393]  x64_sys_call+0x152e/0x1530
[  171.331542][ T9393]  do_syscall_64+0x115/0x870
[  171.332994][ T9393]  ? clear_bhb_loop+0x40/0x90
[  171.334447][ T9393]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.336303][ T9393] RIP: 0033:0x7f479ef9e0d9
[  171.337673][ T9393] Code: Unable to access opcode bytes at 0x7f479ef9e0af.
[  171.339757][ T9393] RSP: 002b:00007f479feddfd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[  171.342359][ T9393] RAX: ffffffffffffffda RBX: 00007f479f226090 RCX: 00007f479ef9e0d9
[  171.344747][ T9393] RDX: 00007f479fede9c8 RSI: 0000000000000000 RDI: 0000000000000000
[  171.347210][ T9393] RBP: 00007f479f035024 R08: 0000000000000000 R09: 0000000000000000
[  171.349695][ T9393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  171.352150][ T9393] R13: 00007f479f226128 R14: 00007f479f226090 R15: 00007ffdc5527d48
[  171.354570][ T9393]  </TASK>
[  171.356311][ T9393] Kernel Offset: disabled
[  171.357631][ T9393] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:25:05  Registers:
info registers vcpu 0

CPU#0
RAX=00000000001b68bb RBX=ffffffff8e891480 RCX=ffffffff8bbb42d5 RDX=0000000000000000
RSI=ffffffff8e1a826d RDI=ffffffff8c402680 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10
R8 =0000000000000001 R9 =ffffed100d48678d R10=ffff88806a433c6b R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000
RIP=ffffffff8bbb289f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d5dd8000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fbba73eb7c0 CR3=0000000034235000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000a110 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000607c0000 Opmask01=0000000000000000 Opmask02=0000000007fffeff Opmask03=0000000020400004
Opmask04=00000000fffff7ff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558941f9b380 0000558941f9b380
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558941f7f900
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55589f1b20
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55589f1b20
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737326fa32886173 737326fa328b76db
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737332 7373737373737373
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000706f6f 6c615f646e733a6d 726f6674616c703d 5341494c41444f4d
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000004d5252 515c5f59534e0750 4f525b495c514d00 5341494c41444f4d
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f55d94d7fc84ea70 0000558c1963d06d 00000000000000c1 000070304431436d
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f55d94d7fc84ea70 0000558c196c582d 0000000000000381 0000003177617264
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a29393030 322c394843492b35
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3351284350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85a306b5 RDI=ffffffff9ba0be80 RBP=ffffffff9ba0be40 RSP=ffffc90004be7610
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000039333954
R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b6fe1e7 R15=ffffffff85a30650
RIP=ffffffff85a306df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d5ed8000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000555567952a28 CR3=0000000022cca000 CR4=00352ef0
DR0=0000000000000005 DR1=0000000000000005 DR2=0000000020040004 DR3=0000000000000056 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73657479625f6563 69767265735f6f69
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeb92ad056
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeb92ad056 00007ffeb92ad05c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5a51835607
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5a51835647
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5a518357ab
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5a51835639
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=0000000000000007 RCX=ffffffff8287128f RDX=ffff88802971a540
RSI=ffffffff8286fd43 RDI=0000000000000007 RBP=0000000000000001 RSP=ffffc9000e6b7448
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=0000000000000000 R13=0000000000000001 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff8286fd4a RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d5fd8000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000110c394e7e CR3=0000000034e2d000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a82b4148341652be f348ff8fa39c8df7
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeb92ad056
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeb92ad056 00007ffeb92ad05c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5a51835607
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5a51835647
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5a518357ab
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5a51835639
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 edc894d34efec05b 32d686678a76453e 5cf9d8f76d1a8ee2 f9ffdb78c79dcce2
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666b75138b56c194 1f50219a6b76934b 2fef03812a7dadc6 e943c458f1802c96
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 110f0685a0e2454c 67f43e349ebf4718 24487b6de2ce1145 ef463f3fe6a2bdee
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 663e9dd1ba3d2ff0 28c9fdd35a045af0 3a1921e725ed582e 7136c4fc0aaf33b2
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7040c3968bdad204 1780cf464ff7666b 75138b56c1941f50 219a6b76934b2fef
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03812a7dadc6e943 c458f1802c9692e8 c55376150bcd3815 cfb1ba5934ad9ece
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=ffffc90005a17118 RBX=ffffc90005a17118 RCX=ffffffff81b883ce RDX=0000000000000001
RSI=0000000000000060 RDI=ffffc90005a17118 RBP=0000000000000060 RSP=ffffc90005a17098
R8 =0000000000000001 R9 =0000000000000000 R10=ffff888025d53590 R11=ffffffff826f55f4
R12=0000000000000000 R13=ffffc90005a171d8 R14=ffffc90005a17118 R15=ffffc90005a17140
RIP=ffffffff827ae7a2 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 00007f5a525f36c0 ffffffff 00c00000
GS =0000 ffff8880d60d8000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f5a525f1558 CR3=0000000034e2d000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fffffc00 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008001800180010 0018000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeb92ad056 00007ffeb92ad05c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5a51835607
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5a51835647
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5a518357ab
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5a51835639
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003570 6f6f6c2f7665642f
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001653 4c4c4f0c5546470c
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5a519f25f8 00007f5a519f25c8 00007f5a519f2600 00007f5a519f25e0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000